Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer (raw, json)
Hash identifier: cKoB6yV9284JI8Im1DPSbx5wlwpCpLwTctGw3L4t+/8=
Subject key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0D9B85C09BCAB2E660DC37EAE938
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.156.200.0/23
IP: 194.156.204.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0d:9b:85:c0:9b:ca:b2:e6:60:dc:37:ea:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:38:35:36:23:18:73:04:34:55:35:bf:82:
f2:c9:76:f5:33:a9:7e:9b:bd:31:c2:86:7e:5d:e6:
0f:7a:9b:34:0e:0d:1c:7f:e5:33:a8:18:36:38:6e:
c2:c9:7c:86:2e:a1:e9:81:95:52:4d:75:44:eb:75:
b2:c0:85:8f:ac:eb:c7:f6:02:ea:59:bf:4d:2c:d4:
74:a9:67:77:29:37:ce:be:05:7d:30:e4:34:b6:4d:
5b:20:ee:91:71:69:db:65:50:80:10:93:31:17:26:
3d:8f:78:fe:a0:72:2b:04:d8:30:4e:8a:70:ff:e3:
01:a5:46:01:4a:8e:e6:a5:7e:2c:6b:03:2c:ac:9b:
93:34:f5:d0:f6:1f:76:ac:c6:11:66:ae:c0:b8:aa:
3b:66:e9:6b:24:aa:85:ee:b0:79:b9:e6:80:55:b7:
b9:ad:14:f7:35:1e:70:99:17:16:bf:08:58:81:70:
91:e0:ae:50:88:d0:f1:11:d1:6c:ed:5d:5c:58:73:
b8:9f:f4:8e:78:3d:d9:af:84:12:22:3f:de:74:2a:
e1:c3:a1:15:63:88:ed:f9:ce:48:e6:d0:c6:b9:f1:
f7:30:dd:80:e8:9e:5a:c6:bf:7b:8b:33:58:43:cc:
82:9a:a3:1d:a1:24:c1:23:bc:8b:4d:ea:bc:9f:81:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.200.0/23
194.156.204.0/23
Signature Algorithm: sha256WithRSAEncryption
19:7d:c5:2b:f6:e8:a7:18:b1:f1:43:ea:f2:5e:62:e7:33:da:
3c:13:7f:ce:d3:eb:af:ea:17:93:54:cc:b2:30:32:b2:07:a0:
31:a7:7b:60:04:4b:e4:2c:6d:b7:76:6c:35:03:d3:99:b3:71:
8c:61:dc:d8:30:6f:dd:dd:cc:ac:ce:95:97:ea:00:46:84:07:
8d:f9:5e:61:5e:2d:55:72:53:5e:d0:ed:db:55:0b:d9:1e:20:
76:fc:7c:32:76:3b:81:2c:a1:9a:1b:0d:97:ce:ce:d3:e6:f9:
67:c7:f9:42:29:98:11:73:11:c1:8c:f5:4e:11:33:30:b8:4a:
a8:47:a1:cd:73:2a:dd:d5:da:d0:b7:a4:c9:98:ba:ca:48:2a:
c4:4a:0b:ab:5d:49:88:f1:0b:89:0d:2a:f9:3b:3b:9f:4b:79:
43:cc:0e:6f:4e:24:23:4a:06:28:36:79:36:ab:92:28:97:ee:
da:9e:6e:94:76:10:92:d9:4d:2a:89:5c:05:48:83:06:8d:c5:
54:31:ad:39:ee:04:6c:9d:bc:73:37:ea:0b:19:4e:12:fe:30:
47:6f:4b:ef:fc:7c:a0:52:99:ba:9f:94:51:e7:43:b7:b9:10:
ae:17:bb:02:77:0f:5d:55:14:92:8d:f8:ab:36:02:3d:0b:91:
9a:f2:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:36 2025 by rpki-client