Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
File: _j0jo57TZW-aYGS2CdAqL25KOCc.cer (raw, json)
Hash identifier: toPp+ZU5AREANoO/YIHmXPjzrKxj3DU/l/pegpx5xC0=
Subject key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EE25B254AA7D3702B03011C679CFE3A36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Apr 2024 15:23:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.96.208.0/22
IP: 2a06:180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e2:5b:25:4a:a7:d3:70:2b:03:01:1c:67:9c:fe:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 15:23:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:39:18:28:9b:ae:ca:30:34:93:6e:cf:62:
7d:d3:bb:c2:16:56:81:1d:2b:8c:6a:8c:37:54:9f:
1c:25:73:ba:3f:1a:e6:9a:4f:99:1b:39:b9:fe:43:
00:1d:5b:36:00:cd:e4:18:6e:3b:81:88:af:c4:b1:
ed:ab:ce:43:d6:00:44:51:a4:ab:e3:1a:1d:df:78:
30:89:5a:db:df:83:09:9d:fd:e2:6a:a6:2d:28:6e:
10:b1:51:4f:90:0a:5f:3e:99:c8:84:3b:9c:e7:4f:
e1:7c:5d:ad:43:a8:fa:b2:df:1b:e7:8b:62:7c:08:
59:f7:cc:f4:78:a7:5c:95:54:97:85:af:f9:a5:11:
92:b8:6a:59:55:dd:29:bb:f6:af:b4:7d:1a:af:df:
5e:33:68:3f:e9:1a:c6:d6:2c:3a:8a:35:02:05:dc:
41:6d:4b:72:19:71:7f:fb:15:9c:b9:40:4e:be:7f:
10:6a:98:9a:fb:be:9d:50:68:ac:80:52:9e:93:2c:
0c:23:58:de:37:f8:88:32:8d:c6:6d:be:fc:c5:ec:
64:93:90:ee:cf:eb:90:46:dc:82:a1:de:cc:55:ec:
6a:37:b2:90:e5:8c:93:46:70:23:ba:81:0f:1a:cc:
30:63:67:85:03:5d:e3:58:98:be:34:84:24:7b:f5:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.208.0/22
IPv6:
2a06:180::/29
Signature Algorithm: sha256WithRSAEncryption
91:24:31:0c:d3:7a:14:d5:51:76:64:8e:b5:17:17:06:27:f0:
b5:e9:7a:57:65:84:11:0c:0a:40:b8:e6:f8:71:d7:a8:32:e1:
11:ca:f1:52:f9:9c:06:a6:f0:91:4e:cb:4d:af:19:5a:07:7c:
1d:0b:f1:19:76:56:08:6e:47:29:e4:ae:23:9e:da:21:83:8d:
ee:73:fe:75:0d:aa:23:cd:a8:17:fd:60:5c:e6:c7:3a:d0:c0:
65:11:ab:4e:29:8e:5a:f1:31:c8:75:59:c6:1a:c4:36:0a:19:
ee:14:5a:08:36:3f:94:2c:67:38:fc:5f:02:4d:4c:6b:b8:ca:
a6:d5:e8:d0:63:ff:b2:26:99:a3:bc:cb:5d:ab:fb:74:e2:22:
d2:2b:f1:39:35:23:f4:fb:b0:ca:88:f6:b5:51:1f:d6:2f:1f:
10:a3:ea:ef:02:7f:0b:d4:31:67:47:54:e0:83:77:b6:26:56:
28:cd:1e:88:b7:2c:2c:89:57:9d:78:d3:c4:89:70:bd:07:88:
66:87:09:85:4b:07:ff:ff:a8:e2:94:f5:30:2d:b4:76:09:cf:
ac:fd:e3:b2:5e:ff:37:5d:9d:fe:76:62:24:43:b3:cf:20:69:
96:dd:30:91:a6:8a:27:27:00:d6:c1:50:7d:f0:4b:41:5d:0e:
28:48:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:31 2024 by rpki-client on console-ams.rpki-client.org