Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.cer (raw, json)
Hash identifier: wUl3o1ydPAIhpR1z1Z2wD1rUYOPCuQJHi9v39tntivs=
Subject key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB0FCA6DEE474CF620F8D5051700DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.56.234.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0f:ca:6d:ee:47:4c:f6:20:f8:d5:05:17:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:60:0a:ab:cf:1f:7d:56:90:c5:ed:68:36:
7f:77:cd:dd:12:6a:f7:2f:7f:c6:07:1c:45:89:09:
14:af:31:3c:df:69:f9:d1:c7:5d:2b:47:7b:ca:50:
84:5f:f4:c4:8c:b0:66:4f:b7:c9:a5:41:a7:a3:58:
69:74:e6:4d:9b:39:ce:ff:b6:8d:13:b0:15:73:40:
22:bf:91:49:41:b9:03:26:3f:cb:55:52:db:c0:0b:
6d:16:d4:f1:8e:2d:54:e0:f8:15:18:f4:cb:dd:98:
b0:0e:79:49:6a:c2:24:2d:6f:ce:f8:b7:b7:00:28:
40:d9:66:61:0a:06:55:ca:9e:de:3c:d9:97:7f:65:
df:e7:d8:53:35:db:b6:87:2f:bf:b8:02:7e:03:91:
7a:35:1c:b8:3d:b1:85:95:99:7a:41:15:97:f0:9c:
72:8e:2f:09:1f:a9:54:47:bb:a6:87:20:03:cc:5c:
ad:c3:fe:53:f2:ee:0e:c1:c8:64:14:5e:6b:54:7e:
a9:8c:a7:49:89:94:3e:e9:4e:ae:43:7b:5f:ad:03:
48:fa:30:a1:9f:d5:a1:9a:22:24:c6:26:61:5e:78:
1c:e0:74:11:ce:51:9b:81:88:6a:90:96:2b:43:ba:
2b:fe:a5:ae:1a:d9:90:35:65:27:44:92:d7:6e:c7:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bf:d0:4d:47:3b:85:f8:9d:53:9b:6d:2f:3a:bd:40:c7:f2:
66:80:a2:d6:4e:68:04:54:a3:68:9b:22:4b:bc:31:29:02:50:
35:f0:44:2a:20:ea:3a:78:6e:a7:dd:7a:aa:80:4a:a9:de:8a:
1c:06:a5:0c:8d:e2:79:08:03:75:e9:05:ed:c9:fc:6e:21:7b:
09:e0:21:06:e0:bc:18:d8:9e:18:75:c7:2f:12:1c:b5:cd:90:
e3:71:7f:76:83:43:94:ee:29:a9:f9:c1:48:d3:ec:2f:49:cb:
4a:13:08:52:18:0e:f8:f3:71:5e:ed:a1:fb:63:55:58:f8:7f:
30:2f:4a:e3:6b:88:6a:a0:29:2a:fa:06:48:0d:fc:b1:79:5f:
91:10:bf:9e:df:81:7c:be:a3:81:fc:70:9d:76:99:bc:9f:7d:
7d:43:f4:54:77:4b:ff:03:2e:8f:9d:a2:dd:fd:2c:3e:5a:e6:
be:6c:06:5e:4b:2e:75:8d:80:b5:f7:f5:2b:9e:6f:83:39:1e:
08:6f:47:ce:af:9f:ca:7c:69:59:90:4b:2c:47:22:86:fe:45:
05:3e:e4:ef:ca:10:56:3c:c9:fd:f9:5a:a4:fc:fb:27:c0:2c:
74:81:00:40:08:70:de:ff:88:c9:f5:27:32:bc:85:b8:c7:7c:
60:7f:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:57 2024 by rpki-client on console-fra.rpki-client.org