Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
File: jIlVMEGw01v4L_tKe6fepIYZPk4.cer (raw, json)
Hash identifier: lRlt5leFHoXjkdRQGlBogkxP+Kc7ijpd9fbL/URTtDk=
Subject key identifier: 8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E9E267CFA08A5B2D7FFBB77DF6220
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.181.104.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9e:26:7c:fa:08:a5:b2:d7:ff:bb:77:df:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:75:82:f4:8a:31:a7:7f:fe:2c:d8:00:f2:
4e:bf:74:a6:27:70:cf:68:56:3b:8b:35:3f:a1:71:
77:3a:5f:d9:fa:4a:73:39:f1:4e:3b:1f:24:4b:4e:
20:d8:a2:2a:5b:7d:13:9f:05:74:14:64:86:87:1b:
5b:d2:1e:5a:35:0a:46:70:51:71:3c:81:c7:72:5b:
b0:98:30:82:70:05:ef:7f:97:23:81:96:0b:2e:5b:
bd:2f:b1:4e:c4:96:27:44:79:a7:f7:c0:02:c8:0f:
20:8f:5d:f7:91:08:78:17:7d:f6:38:6c:5b:ee:1b:
6c:4c:14:96:4d:25:a7:c9:4d:fc:29:3e:e2:1d:45:
b1:e9:c3:9e:23:50:1b:04:94:c9:1c:0f:9b:3e:dd:
1c:03:be:71:31:04:d3:ec:dc:52:4e:3a:56:0d:9b:
d8:33:af:d5:6e:71:2e:d8:b3:5e:53:16:26:08:a7:
4c:4c:34:3f:62:f6:7f:9e:4e:dc:22:5d:37:cf:87:
1c:db:48:ac:98:db:52:93:8a:76:f8:f5:c7:89:89:
9c:9d:3b:74:20:7b:37:65:2f:ee:1a:07:36:61:50:
9e:e9:9c:4c:82:03:82:c3:2f:71:3b:66:d6:5e:09:
6e:3d:c9:c4:83:d5:5d:d2:34:97:b7:10:12:0a:ab:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1e:a4:7c:f3:59:a6:8e:73:79:4f:03:cb:c8:3e:b7:06:a2:
b1:25:3f:3f:07:f0:8c:bc:35:85:17:f7:19:20:3d:87:42:ed:
2e:43:45:f9:e1:ef:42:b7:dd:10:46:1a:5d:a2:f0:89:33:9c:
45:b4:42:e8:e7:55:1a:bb:4c:f1:41:e5:af:b9:f7:af:38:95:
21:5a:f9:33:c7:af:ad:1d:b1:34:cc:24:d4:df:9d:ba:91:c2:
d0:6d:14:61:df:0e:cb:d5:79:a4:47:c6:f3:bd:54:3d:44:1a:
d5:d7:1b:51:9e:86:db:fd:82:78:23:98:24:fc:56:6f:2c:0d:
af:00:2c:14:a2:49:4e:ad:87:ed:d4:65:d6:eb:e3:fd:a6:44:
ab:19:21:a3:e0:00:9f:a5:da:d0:a9:fd:b3:72:f7:3b:54:bc:
70:69:5a:c5:e9:aa:03:70:fe:17:7a:d6:91:cd:53:93:38:83:
83:6f:9b:1f:57:53:b7:02:20:73:71:c4:d2:12:99:54:8f:8b:
6b:96:75:d5:22:f0:b0:c5:ec:06:34:e5:5f:bd:d8:a5:29:6d:
3f:2c:18:95:13:a3:2c:e3:59:56:7c:99:79:3d:34:e9:c4:f2:
a4:57:a0:5b:80:34:bd:a0:a5:5a:07:69:95:87:bb:f6:3b:7d:
bb:fa:da:b0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzFbp4mfPoIpbLX/7t332IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzg5NTUzMDQxYjBkMzViZjgyZmZiNGE3YmE3ZGVhNDg2MTkzZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGB1gvSKMad//izYAPJOv3SmJ3DP
aFY7izU/oXF3Ol/Z+kpzOfFOOx8kS04g2KIqW30TnwV0FGSGhxtb0h5aNQpGcFFx
PIHHcluwmDCCcAXvf5cjgZYLLlu9L7FOxJYnRHmn98ACyA8gj133kQh4F332OGxb
7htsTBSWTSWnyU38KT7iHUWx6cOeI1AbBJTJHA+bPt0cA75xMQTT7NxSTjpWDZvY
M6/VbnEu2LNeUxYmCKdMTDQ/YvZ/nk7cIl03z4cc20ismNtSk4p2+PXHiYmcnTt0
IHs3ZS/uGgc2YVCe6ZxMggOCwy9xO2bWXgluPcnEg9Vd0jSXtxASCqv5LwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIyJVTBBsNNb+C/7Snun3qSGGT5OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzRlOTVk
Ny03Zjc2LTQ1NGQtYWE0Ny04Mzg5ZjQzZWQ2ZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNGU5NWQ3
LTdmNzYtNDU0ZC1hYTQ3LTgzODlmNDNlZDZmNi8xL2pJbFZNRUd3MDF2NExfdEtl
NmZlcElZWlBrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCBbVoMA0GCSqGSIb3DQEBCwUAA4IBAQBkHqR8
81mmjnN5TwPLyD63BqKxJT8/B/CMvDWFF/cZID2HQu0uQ0X54e9Ct90QRhpdovCJ
M5xFtELo51Uau0zxQeWvufevOJUhWvkzx6+tHbE0zCTU3526kcLQbRRh3w7L1Xmk
R8bzvVQ9RBrV1xtRnobb/YJ4I5gk/FZvLA2vACwUoklOrYft1GXW6+P9pkSrGSGj
4ACfpdrQqf2zcvc7VLxwaVrF6aoDcP4XetaRzVOTOIODb5sfV1O3AiBzccTSEplU
j4trlnXVIvCwxewGNOVfvdilKW0/LBiVE6Ms41lWfJl5PTTpxPKkV6BbgDS9oKVa
B2mVh7v2O327+tqw
-----END CERTIFICATE-----
Generated at Fri May 3 03:37:56 2024 by rpki-client on console-fra.rpki-client.org