Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
File: jHFLbLK61OdjmoqicQKPWqG8asI.cer (raw, json)
Hash identifier: 4iEshbO55BYbmzQc9GLG3rNpUGisDpQgwzPK8wNpXzU=
Subject key identifier: 8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D4F02ADDCA976A727B08474BC3E6FAA96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 28 Jan 2024 07:39:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.26.222.0/24
IP: 2a13:5140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:02:ad:dc:a9:76:a7:27:b0:84:74:bc:3e:6f:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 28 07:39:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:c0:b5:21:67:2f:55:1a:c8:e8:05:af:6e:
7c:1f:89:35:14:c9:92:84:94:ab:e0:2c:ce:bc:59:
40:34:77:f8:f4:5a:ee:4d:df:ab:f5:08:7d:f3:96:
82:77:d0:6c:3d:11:ef:d4:e7:99:7c:ec:d0:09:fb:
ea:a5:ea:9c:6d:dc:0b:9c:93:30:6b:db:4d:e2:29:
57:4f:06:fd:b2:b9:a6:ec:6c:9d:8f:a6:22:50:8d:
04:3f:8b:a2:7d:ca:53:f2:31:84:93:fc:ce:3b:a7:
c9:5b:fb:58:e6:61:ce:f6:26:82:5e:86:73:07:cf:
ab:e4:ff:de:3a:e8:14:9e:1f:b5:05:b5:62:f6:d9:
18:d5:0b:87:d3:57:35:74:2f:2b:4e:2f:d3:b9:8d:
7d:f9:65:21:ef:55:5d:53:17:2f:13:6f:ca:0a:a1:
af:df:d4:95:d9:98:0c:cc:1a:53:e3:3f:3e:d7:5d:
f1:46:48:80:91:c4:43:68:b8:a7:c4:7e:56:f2:bf:
46:6b:37:ec:6f:89:11:8e:70:1a:20:a6:5a:9e:8c:
9b:0b:03:67:a5:90:b8:1b:c3:41:41:7d:6e:d8:9b:
c4:47:b2:91:fa:7d:0a:81:20:09:06:32:10:c3:2f:
1d:5e:63:bc:fd:cb:22:b6:03:af:0c:5a:0c:2f:b2:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.222.0/24
IPv6:
2a13:5140::/29
Signature Algorithm: sha256WithRSAEncryption
b0:3a:cd:f6:94:90:de:6d:f6:a2:0b:9c:ac:5b:a4:f3:0e:1c:
d0:7f:12:f8:14:f8:43:16:f6:af:80:37:fe:32:02:bf:e4:57:
c2:dc:7d:05:af:07:27:dc:c4:64:85:3c:8f:a4:74:d9:c6:3b:
f7:55:d3:ee:c4:89:a1:c3:b6:4c:ab:99:c7:54:d6:6d:74:9e:
18:88:6c:23:d4:46:d9:2c:6d:90:14:e6:b6:c5:ac:53:24:22:
1a:bc:95:95:ed:0f:6c:e3:da:1a:4a:e8:5d:d5:40:d1:d5:a3:
56:25:f0:c8:72:75:10:0c:81:73:a6:33:8e:ee:dd:4d:e7:f2:
4f:d6:90:05:31:96:9c:01:dd:c0:a1:ef:7f:20:7c:aa:96:b0:
83:2a:35:10:ac:67:6d:e0:66:3f:f6:6b:f3:2a:47:2f:c6:a1:
34:78:3d:1d:67:de:e1:14:f4:2e:e5:8a:ec:55:58:bf:7c:eb:
70:7c:7b:0c:1d:01:78:a4:32:be:66:0c:d8:ae:b1:af:7c:97:
dc:cb:b0:6b:41:e0:45:a0:a2:f4:21:21:8f:cf:ce:5f:91:ee:
7c:68:26:96:3f:1a:f4:1f:03:2b:07:24:9f:7d:ac:79:60:6a:
20:b2:d5:ee:9a:b1:a8:ba:42:91:46:52:4e:b7:3b:14:d2:76:
fd:00:90:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:00 2024 by rpki-client on console-ams.rpki-client.org