Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer (raw, json)
Hash identifier: 8RMKKV51T403nPe5xMls0dU7i6LhTMLW7020QVVIuho=
Subject key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCE433E6542EDF2B36142EA980FCF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.156.200.0/23
IP: 194.156.204.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e4:33:e6:54:2e:df:2b:36:14:2e:a9:80:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:38:35:36:23:18:73:04:34:55:35:bf:82:
f2:c9:76:f5:33:a9:7e:9b:bd:31:c2:86:7e:5d:e6:
0f:7a:9b:34:0e:0d:1c:7f:e5:33:a8:18:36:38:6e:
c2:c9:7c:86:2e:a1:e9:81:95:52:4d:75:44:eb:75:
b2:c0:85:8f:ac:eb:c7:f6:02:ea:59:bf:4d:2c:d4:
74:a9:67:77:29:37:ce:be:05:7d:30:e4:34:b6:4d:
5b:20:ee:91:71:69:db:65:50:80:10:93:31:17:26:
3d:8f:78:fe:a0:72:2b:04:d8:30:4e:8a:70:ff:e3:
01:a5:46:01:4a:8e:e6:a5:7e:2c:6b:03:2c:ac:9b:
93:34:f5:d0:f6:1f:76:ac:c6:11:66:ae:c0:b8:aa:
3b:66:e9:6b:24:aa:85:ee:b0:79:b9:e6:80:55:b7:
b9:ad:14:f7:35:1e:70:99:17:16:bf:08:58:81:70:
91:e0:ae:50:88:d0:f1:11:d1:6c:ed:5d:5c:58:73:
b8:9f:f4:8e:78:3d:d9:af:84:12:22:3f:de:74:2a:
e1:c3:a1:15:63:88:ed:f9:ce:48:e6:d0:c6:b9:f1:
f7:30:dd:80:e8:9e:5a:c6:bf:7b:8b:33:58:43:cc:
82:9a:a3:1d:a1:24:c1:23:bc:8b:4d:ea:bc:9f:81:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.200.0/23
194.156.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:52:49:4a:93:92:94:97:0a:40:72:40:6e:b8:dd:1a:af:4f:
c4:24:9a:cb:b0:91:e2:e6:b9:d6:5d:0f:68:5b:a0:30:45:10:
1c:88:b4:b0:2b:72:d8:5f:69:63:8d:74:43:1b:44:fb:f7:f9:
35:b9:aa:9e:a8:88:fd:c0:da:0d:de:9d:a0:72:40:4a:84:53:
82:f0:4a:39:2d:fb:50:27:ce:51:22:38:1f:8b:eb:b4:6e:e5:
56:a0:60:a4:ca:a2:2e:b3:e0:e3:ae:d4:81:1f:d8:cf:7d:31:
0a:1d:cd:a2:c1:e3:9d:82:0d:26:1c:86:85:51:a6:d6:a8:5a:
c8:d6:bf:7c:ec:fc:fb:3f:98:9b:69:9d:27:0c:f7:fe:79:81:
bc:ea:3e:62:37:64:03:6e:a4:d4:48:ad:d0:8a:c6:2e:0a:32:
39:32:c9:97:43:4e:b9:59:94:c7:94:84:16:6f:56:36:6c:f7:
18:d8:f3:95:29:29:c9:45:12:ab:0e:2b:3e:21:a1:48:18:05:
3a:7e:b3:d7:a1:1c:c8:d2:59:62:8b:f7:d1:5f:4a:22:c3:b4:
ce:f5:71:af:2b:38:59:be:3e:34:da:4d:7b:ff:19:71:b4:30:
b3:02:fd:b8:cf:df:42:1d:ed:27:21:6c:d4:bf:e9:0a:ce:4c:
f2:5f:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:56 2024 by rpki-client on console-fra.rpki-client.org