Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
File: j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer (raw, json)
Hash identifier: anHapCDvAu4FcMfHSqN5F5sHt8fJ6wBYG+JJsTir60g=
Subject key identifier: 8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC76526573190226C7AB0EDCC40A2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.193.186.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:76:52:65:73:19:02:26:c7:ab:0e:dc:c4:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fad478776df320a8667e75e69e09efb73938b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:8d:e1:d2:55:0e:5c:ce:f8:be:f1:1a:66:
e3:62:c9:d6:e7:c3:f6:ef:05:22:83:b7:42:4c:26:
1d:60:10:34:0f:23:74:1a:8f:d7:b1:26:35:9e:08:
46:ac:c0:94:03:59:bc:08:d5:85:9f:c5:44:fd:70:
3c:9d:e1:3d:89:b3:82:57:fd:3e:8a:f1:af:b1:89:
0f:7d:6f:04:e7:d7:90:c9:94:5a:c0:f1:1f:9d:b1:
e6:77:a9:a8:c9:8c:de:e8:5d:85:23:c1:cd:22:a5:
bb:9c:62:6d:9f:24:85:15:06:52:dd:24:5b:00:f0:
57:ca:07:05:aa:1a:c8:64:ad:77:a2:18:61:33:ba:
47:ef:b4:fb:ad:80:c6:b8:44:ca:4d:ce:2f:42:65:
41:7c:cb:48:96:a4:34:d7:17:62:5b:87:12:b2:d3:
db:e0:12:f3:bc:9f:49:ec:f0:97:cc:31:8d:cf:37:
f5:59:24:84:26:83:77:31:9d:01:6b:0e:f2:7a:83:
1b:69:ad:71:c5:b9:63:e6:22:08:dd:5a:13:9e:78:
b0:28:a7:ff:ee:e9:c8:41:5d:19:8b:21:15:e0:f1:
b5:ee:fb:85:4f:1f:2c:49:05:ee:37:be:8c:e8:86:
df:0a:96:fd:13:76:e2:0a:51:4a:a2:47:c7:c4:0f:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.186.0/24
Signature Algorithm: sha256WithRSAEncryption
90:db:06:3e:68:3c:a8:e0:97:82:31:ea:d8:5b:4b:2a:5e:4d:
64:11:a5:22:1e:eb:38:e6:86:0d:8d:b9:e6:ab:5b:15:84:dc:
d5:7c:17:4a:58:89:6f:0d:62:76:96:4a:94:5e:9c:d0:5e:d1:
e6:96:4d:71:07:cf:d1:c3:0a:09:27:af:d1:ad:2b:ad:3a:6a:
92:a0:17:ca:48:4e:b7:30:28:2b:98:5f:d1:8d:98:99:35:4c:
a8:62:4b:1a:05:2d:05:a1:c4:48:96:8b:12:21:1e:a0:d3:ac:
ab:29:74:81:a3:5b:1f:85:f9:a7:58:be:92:84:d2:c8:37:f8:
10:a3:ba:56:40:04:f1:e9:6b:d4:20:ff:bd:bf:dc:17:df:9d:
87:b7:ab:3b:8e:59:28:44:82:82:bd:ae:99:82:05:82:42:97:
e6:51:a7:90:83:3d:99:fc:72:4c:4c:62:b3:f2:b7:a6:56:d1:
b3:3b:57:05:9a:fd:04:6f:99:70:b5:46:d2:9b:7a:22:c0:a4:
87:1e:41:f4:05:55:79:24:ba:4c:3b:13:11:83:e0:40:39:73:
ce:ec:ca:6b:11:3c:ca:25:e5:bd:44:89:a7:e2:a4:39:ec:6d:
92:e7:25:0c:f7:0a:ea:6e:88:19:e9:bb:a7:f7:8a:24:5a:11:
4c:1c:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:46 2024 by rpki-client on console-fra.rpki-client.org