Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.cer (raw, json)
Hash identifier: mOgTpfTSR+ms4AJ0AQFYanj2EC9CYD70qVvp38mjpUI=
Subject key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DCD3F3258B695E2D17F24B12372B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39187
IP: 91.208.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dc:d3:f3:25:8b:69:5e:2d:17:f2:4b:12:37:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:d7:71:12:79:02:a0:bc:9c:cb:a4:15:01:
4e:3c:c1:df:8c:29:dd:db:9c:1e:e8:9d:53:56:0f:
c4:c4:65:c0:d3:7f:46:7c:20:b1:0b:69:4e:cb:07:
14:54:3c:01:8b:90:1b:47:50:83:99:6c:e6:b7:6d:
42:d2:f6:c9:e8:54:c2:a3:2b:54:7f:fa:aa:56:23:
a9:7b:0c:38:d6:1c:e0:68:c0:8e:d9:be:0c:95:94:
1b:24:aa:2e:db:e1:a9:1d:eb:0d:bf:15:09:40:11:
ba:56:ad:4f:be:80:21:8c:12:e6:35:d3:37:ad:7c:
63:55:df:5c:38:79:88:a3:a4:dc:40:7f:61:51:c4:
a6:1f:73:ba:d9:ee:16:11:26:21:f9:f8:f1:85:9b:
af:85:b8:8a:8d:e9:89:8e:87:c1:65:3a:c7:c8:45:
aa:a3:78:a8:7e:39:a8:b6:0c:36:13:a0:e0:ed:55:
28:e0:32:72:08:87:ea:a5:c6:52:ae:a7:c7:16:0e:
ba:b7:33:ce:2c:34:7b:e7:68:9c:f4:0d:b1:b2:57:
78:3b:24:f3:eb:8f:70:93:ed:d6:c1:67:09:8b:4c:
6d:82:89:e2:a1:8d:10:ec:1d:99:ef:7f:fd:3a:0e:
e7:c4:fc:b3:a7:d1:12:52:9d:bc:e1:03:3d:09:29:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39187
Signature Algorithm: sha256WithRSAEncryption
57:98:bb:25:98:f4:11:bc:7a:64:c1:e4:86:da:c0:6b:3f:1e:
57:ce:e0:eb:1b:1d:8f:65:97:71:44:7c:68:54:e0:93:e8:5c:
cf:4a:18:ef:96:76:e7:3e:38:cc:21:a6:a1:87:27:4f:db:b1:
42:f1:b7:f7:8b:b9:29:61:41:e6:e7:27:3c:ca:b1:61:56:81:
85:70:a4:a1:9e:0c:80:f6:14:b7:34:bc:f0:50:ee:2c:df:ef:
1c:9d:39:57:3c:c6:33:78:b6:b3:91:93:41:c3:14:e9:ec:10:
29:d9:3b:b5:73:80:ce:c2:c7:6e:af:7e:4e:95:bc:80:00:08:
9e:c2:4a:ff:bf:ca:ed:40:00:49:d0:81:40:81:bc:4f:89:10:
40:24:80:08:cb:d7:e2:05:d5:c0:f4:61:8e:93:7d:16:f4:1d:
c4:c2:ee:8b:4c:a8:4c:6e:6a:03:98:78:bf:68:c3:48:c5:2a:
62:31:5b:50:36:f7:b9:ed:13:16:aa:b0:7e:cc:f4:06:4b:6d:
46:9e:0d:ba:b7:f1:da:aa:61:78:8e:94:f9:bc:73:f4:19:ce:
70:7b:34:f5:25:de:68:50:dd:6f:d4:e1:3a:e8:9f:c2:10:d5:
44:5c:e3:10:0c:85:36:50:ec:5a:69:f3:76:67:5c:ef:2a:15:
81:12:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:46 2025 by rpki-client