Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
File: jDPdzqsVS99j54n0RDSErVVIZkw.cer (raw, json)
Hash identifier: D9IaIfZMNqG3i8sAQeH1q6jd3P7qAcb02pqfIPn09ak=
Subject key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0C4DC4198B1C120ABBE061FCCF4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25445
IP: 193.178.184.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0c:4d:c4:19:8b:1c:12:0a:bb:e0:61:fc:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:3b:d3:f2:fb:c9:ce:ab:43:63:f7:9a:18:
4c:0f:50:fe:63:ec:95:20:aa:b9:9e:28:34:e1:ed:
40:a9:de:f0:99:32:91:4d:59:0a:e3:60:ae:7c:91:
17:b2:20:6f:f3:00:19:5f:b7:6e:ff:40:2c:de:72:
99:96:49:81:b3:b6:95:95:c3:b6:f0:9a:8c:02:12:
dc:ae:bc:58:2a:35:9a:dd:43:33:36:43:d5:57:53:
c5:c1:42:9e:f2:5a:e1:9b:5c:25:2d:b7:8b:65:a4:
bd:db:2b:b0:56:58:50:8f:52:05:da:a1:c7:97:87:
27:f8:da:1b:12:c4:b3:f5:90:8b:d4:09:63:8a:57:
d1:13:75:4e:b8:22:bc:13:19:f4:94:2b:84:10:a1:
05:98:fe:f2:8a:27:0e:9a:2a:45:7d:72:ed:73:a7:
bb:4d:10:b4:29:44:50:56:99:81:49:b8:3e:4d:9b:
51:c1:10:fb:c3:ee:83:4f:1a:17:60:a5:22:1b:66:
6e:95:c6:d2:1f:54:39:34:48:65:87:07:a2:9a:42:
d7:82:6b:93:75:71:93:c1:2d:12:73:cc:da:97:be:
5a:95:f4:bc:1a:76:53:9e:67:73:13:c5:db:8a:7e:
b3:c3:3c:0d:bc:b3:a4:7e:2a:40:50:5c:ec:07:fb:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.184.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25445
Signature Algorithm: sha256WithRSAEncryption
42:74:91:b3:72:04:3e:4c:0a:67:ff:88:73:a2:aa:c7:52:3f:
56:b9:ea:6c:4a:ca:21:50:67:bc:ee:26:eb:02:b4:73:f4:e9:
c3:2b:e2:1f:a8:f2:c5:f0:19:ca:99:88:6d:89:57:17:88:92:
97:3c:20:09:34:55:07:11:39:17:2f:6e:81:70:ed:04:99:e4:
3f:ea:48:0a:f7:ce:d9:da:b7:93:61:b3:23:7f:ec:d0:de:48:
65:c8:f4:92:68:8a:92:0e:f8:59:25:c5:12:0a:6b:09:ec:0a:
ae:c7:b5:6a:7f:34:35:f2:c8:7c:aa:ce:1e:45:f9:30:86:ce:
d7:c2:c0:26:9b:30:54:e8:af:8c:91:fc:0b:00:73:e4:db:56:
d6:6d:73:bf:e6:5a:29:a9:2e:45:86:f6:37:97:03:4a:4f:aa:
57:4f:13:02:cd:5c:3b:72:1f:9f:f0:c4:39:5c:df:50:55:06:
51:4d:dc:2b:f0:2d:05:ce:67:d6:6d:16:d8:ca:52:2a:36:41:
e7:2b:09:0e:7d:38:cd:56:92:ad:0d:17:6b:28:e5:64:99:1e:
35:41:73:87:21:da:7b:6f:3e:58:a2:1f:59:73:52:1e:af:be:
63:e5:d8:73:d3:8f:a2:fe:f4:db:6a:e5:ab:ec:ad:13:a3:d5:
36:38:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:52 2024 by rpki-client on console-fra.rpki-client.org