Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
File: jNFQ_x-81CqT603fQ8pxx748cog.cer (raw, json)
Hash identifier: 8CZ5Dg+Bw+GolkZENKUjzLTYZCKbnnrVBFv5lCR9uH0=
Subject key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE7AD3BD006BFFDB2FB7E3B581BE44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50475
IP: 193.105.56.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:7a:d3:bd:00:6b:ff:db:2f:b7:e3:b5:81:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:41:74:78:6f:04:7a:83:7a:52:60:3d:0d:
21:36:10:6d:8e:f8:bc:e3:57:6b:bc:e8:b2:cf:69:
13:19:3d:6a:e2:cb:3c:57:d7:c8:56:34:34:6d:d2:
9a:24:61:a7:b4:3f:cb:cb:b9:4e:7d:d1:79:53:a8:
5d:76:84:ce:b7:a0:be:57:fb:d7:9c:7c:c4:b4:69:
b2:ca:77:78:fc:2e:63:2a:94:6c:8a:8e:bd:1d:eb:
99:8c:e4:24:22:4f:2f:9d:60:b9:32:8f:7c:88:b0:
97:2f:98:8f:a4:e8:7a:8c:fc:e3:63:1a:77:8b:c8:
6a:ec:4f:41:d8:be:a9:a3:7b:34:fb:fe:0f:fe:17:
39:b9:99:d3:0e:1a:3b:78:a9:99:78:26:99:db:79:
1d:6d:75:c4:fa:e8:bd:17:69:05:a5:e6:56:1e:11:
fb:f7:17:c7:7e:26:1b:43:f4:30:65:ad:cb:4f:38:
40:e4:ac:69:bf:ef:ad:dc:ed:e1:05:94:07:37:c1:
3d:ef:0a:31:6a:78:ef:25:ee:65:ca:56:8c:9b:a8:
4a:85:bd:19:fd:89:06:3f:65:46:1c:be:34:9b:51:
ab:11:0e:6e:a6:6b:d4:6e:76:c5:a9:36:70:7e:ef:
27:df:eb:38:2f:16:22:b6:5f:4a:d7:27:a0:5a:d3:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.56.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50475
Signature Algorithm: sha256WithRSAEncryption
86:44:b7:87:0b:c2:65:00:91:b0:1b:40:e7:ba:2a:46:08:99:
83:04:c1:03:64:83:a9:f2:7e:33:52:56:9f:fc:7c:00:06:ce:
23:88:15:19:01:d0:6d:4b:12:15:b2:d3:27:76:9d:3f:61:a2:
63:c3:7f:f3:8b:89:ba:30:34:fe:e1:63:8e:2f:5a:7a:94:77:
62:e1:23:ec:61:a4:5b:e7:f7:7a:ee:26:ac:8b:94:33:d3:62:
29:5d:f1:ab:71:a8:8e:7d:e3:03:30:ad:1f:9d:c9:ef:b3:84:
25:9c:99:3a:35:9f:c4:ed:5d:c2:af:ba:27:39:14:a5:05:af:
b1:1e:ac:c9:09:c4:e4:b3:20:fe:fa:06:70:a0:29:a3:80:6c:
ce:c3:e6:65:fc:2d:bb:f8:37:73:15:d1:7a:ad:b4:ec:59:4f:
65:60:19:38:f3:a0:a4:17:07:3d:c3:03:de:00:11:de:55:6c:
c0:dc:ad:ed:9f:f2:5a:8f:89:ae:5b:99:52:b0:f4:75:61:d9:
67:71:3b:e7:ee:1e:17:c5:40:73:0b:91:6f:3e:8b:a9:78:6d:
05:44:47:bf:3f:de:62:5a:d6:d3:33:53:c7:43:16:43:78:df:
1e:12:e1:46:64:38:c8:1c:f2:7b:a3:ec:43:65:cb:02:d0:c4:
27:38:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:59 2024 by rpki-client on console-fra.rpki-client.org