Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer (raw, json)
Hash identifier: 0Mz7wdp5iSEaGBwbG2U0e4febuhBM8tGs/YhZAQvro8=
Subject key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F630503F66653C394BBD88C27AD6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205493
IP: 185.215.192.0/22
IP: 2a0b:ad40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:05:03:f6:66:53:c3:94:bb:d8:8c:27:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:c8:6f:20:3e:36:47:27:ab:cc:24:57:73:
a1:ba:10:ae:15:9a:73:1d:14:76:75:93:ad:32:2c:
55:d6:dc:16:9b:86:02:d4:42:cf:0c:94:bb:74:0a:
5d:32:d4:06:c2:ef:22:0e:7a:b9:15:b7:04:12:78:
33:43:0f:38:58:72:54:25:dc:28:df:bd:9f:13:72:
a4:38:41:3a:dc:18:8e:68:6e:62:ec:a2:bd:38:ee:
16:f2:25:51:6a:e1:d7:55:b3:8f:47:f6:ac:54:df:
7d:49:e5:4e:c7:4b:dc:53:56:4f:7f:0d:be:8e:bf:
9d:e2:f5:60:79:41:69:2b:e4:e7:01:fa:8e:aa:d3:
8e:29:d6:85:9b:9a:ac:d4:65:a9:96:96:8d:ec:27:
e0:3a:5f:95:51:33:af:05:cf:38:94:bf:91:4e:cb:
4e:dc:d3:77:d7:78:fe:e8:40:2c:40:d6:11:ab:47:
3f:ca:da:6b:73:f3:4f:74:7b:29:60:7f:3c:ac:45:
5e:a9:9b:82:c5:75:c9:74:79:bc:5f:a0:60:d7:37:
c0:cd:bc:15:3e:11:01:57:82:a7:49:d2:27:e2:8f:
72:10:e6:2a:e5:19:38:26:27:c5:22:fc:b2:6d:aa:
67:45:9f:76:90:cc:e0:6b:0b:a6:02:4d:a5:36:c8:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.192.0/22
IPv6:
2a0b:ad40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205493
Signature Algorithm: sha256WithRSAEncryption
9a:4a:22:75:dd:ad:32:98:46:4a:7e:ce:53:00:7a:a8:c5:b5:
f6:52:fa:de:07:45:2e:84:2b:0d:6b:56:7c:28:62:e1:ee:85:
76:ca:d0:ce:80:d4:75:20:2c:1a:4e:c1:7e:64:52:26:b6:6f:
21:ce:b8:97:8c:ee:6e:f1:73:ae:41:a0:df:b4:6b:08:46:d2:
8e:6a:00:59:fe:37:d2:ae:eb:d4:5f:fc:24:56:44:c6:63:55:
91:3e:f3:4a:c4:02:27:2c:44:5f:8f:af:d1:be:1c:8b:11:73:
5e:7e:4e:38:c3:af:79:26:ac:84:ad:13:59:9a:9a:84:e1:5a:
87:fd:90:2b:a6:80:40:97:6d:aa:6b:16:55:4b:5c:9c:4e:2d:
ae:0e:38:a4:79:95:7d:65:b3:5f:7a:28:5a:5b:3c:d0:9e:9c:
2c:17:de:8e:69:ee:67:d8:31:1f:3d:5b:fb:0c:7c:7e:af:35:
64:c3:0e:e8:be:db:7b:fa:f0:5d:bf:54:db:eb:72:72:ff:80:
6c:1f:9c:e4:91:23:60:8e:77:6f:ee:3a:03:59:67:09:69:ea:
62:02:9b:8c:db:e6:d2:ab:fe:b6:4e:ba:55:f0:81:ff:ea:60:
b5:ef:ea:c7:0a:f4:be:41:c3:d1:b3:75:6b:30:2e:e1:e1:42:
97:6d:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:58 2024 by rpki-client on console-fra.rpki-client.org