Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
File: j8HWvjunicXa61l6E13l7Myrj5U.cer (raw, json)
Hash identifier: NeNtf4c8Pf/oXiYhbHNtVM4MIkZadSYUAxKdr3DfXps=
Subject key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5014ACB739919599494595C9EA5F550
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.46.61.0/24
IP: 193.104.108.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4a:cb:73:99:19:59:94:94:59:5c:9e:a5:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:a7:d4:8b:fa:61:4c:22:98:7a:6c:9b:61:
b2:17:10:6d:a3:96:24:fa:b9:d2:3e:36:c8:2e:55:
50:3d:07:0b:39:de:97:db:a2:af:03:1a:e3:41:55:
18:42:3a:34:01:cd:53:f1:60:55:78:32:26:44:29:
96:b8:71:9c:c9:6f:49:9d:a8:8f:9a:9a:ac:ad:a9:
af:96:d2:29:af:fe:46:8b:8c:6e:1f:b0:8a:ea:0a:
f9:f5:22:fd:8b:c8:f6:3a:f9:02:10:0c:0f:cd:a9:
88:b6:5b:f0:7e:da:08:ad:1c:20:08:7d:37:26:84:
cc:1c:2f:24:50:23:e7:3f:dc:f6:a1:8b:a8:f9:7d:
2b:a2:ec:75:a4:5c:f2:27:46:0c:6b:d7:74:fe:c5:
61:5e:5d:cf:80:f7:7b:f0:51:f8:6b:bd:17:68:41:
55:32:bd:4e:f8:12:e2:62:11:de:7a:d3:f2:f8:5b:
01:2f:ea:a1:0c:32:52:d8:83:d1:05:dd:46:f2:d3:
c9:a7:32:b7:bc:09:1d:07:25:64:3e:5f:42:67:9d:
8c:ee:5d:5e:26:d1:04:3b:dc:fa:4d:d7:31:36:b3:
80:0a:aa:2b:b1:03:50:6b:c4:24:ec:8c:f0:36:79:
8e:54:97:2c:71:0f:ed:59:e7:05:e9:b6:09:ea:47:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.61.0/24
193.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
50:af:e5:80:a4:6c:24:1e:0c:bf:e5:c9:bb:0b:0e:94:27:7c:
72:4c:29:61:98:e9:f9:ca:24:08:6d:cd:b8:03:4b:66:3c:f0:
d0:23:94:9a:09:71:08:08:a9:ce:ad:15:26:70:ed:0d:7a:43:
52:06:fa:8f:da:f4:af:2b:50:f7:33:80:5b:1c:53:3b:56:71:
61:95:78:67:bb:3f:f0:d7:fa:5d:66:f7:44:cc:7b:fa:8d:53:
35:72:9f:e1:5c:29:18:3c:0d:64:fb:bf:15:7d:12:ba:94:22:
f7:94:e9:09:37:04:b4:3c:73:43:c9:a1:9a:68:7b:71:18:91:
43:c1:2d:76:aa:1b:af:df:c5:0f:19:0b:8d:54:aa:d4:82:bd:
5a:c4:fb:92:00:b4:e2:0c:5d:7e:50:74:3a:00:db:17:1c:93:
c8:98:47:a3:8a:ca:fb:43:33:71:14:0f:95:6e:40:8a:e5:b6:
e4:9f:b8:db:14:9b:47:66:6e:5b:72:6a:f3:ca:db:45:25:e5:
b6:1f:9c:3b:b6:44:b5:c5:6b:7b:be:4f:af:29:e0:f4:5d:c8:
db:b5:6d:0f:03:89:ca:83:e2:49:4b:ae:2b:be:d4:cd:e3:00:
bd:ca:2c:e5:e7:46:ca:3f:68:d1:2a:d9:3a:d7:e8:9b:fe:55:
9f:49:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:56 2024 by rpki-client on console-ams.rpki-client.org