Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer (raw, json)
Hash identifier: YU1DSAdx3Lu4hGB8gE9rPX54caR5dXqeXJR7gN+3zVA=
Subject key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3495958DB4976E4EE8C7561844F9FDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:59:58:db:49:76:e4:ee:8c:75:61:84:4f:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:a8:88:25:96:18:79:60:6a:04:74:20:35:
3d:2e:3f:a0:81:f9:74:33:e7:75:f1:37:13:b4:9b:
44:a8:e3:85:e7:b2:9d:93:56:e7:d8:8b:9b:42:49:
32:fe:9e:83:7b:40:e6:e5:cc:77:f7:a7:6f:32:90:
2d:33:a3:20:70:b7:c3:f2:d3:e4:70:ae:90:4f:4a:
2f:55:54:3c:b4:c3:db:49:b3:b7:1c:77:00:b3:0b:
41:88:62:cd:c9:4e:8c:11:21:44:52:d3:89:f7:d4:
86:05:eb:2c:5f:93:ed:6e:42:e8:b3:35:9f:3a:20:
02:c6:2b:06:ef:75:7d:6a:d4:81:fd:1e:3a:0c:02:
27:ff:b3:3c:74:2b:f4:e4:c3:67:15:a6:5d:16:c8:
39:3f:31:d2:ff:e0:99:36:0b:90:e4:2c:9e:0d:61:
ce:02:a4:ad:7e:ef:98:c7:d4:38:64:12:87:09:90:
19:3f:d0:21:01:b9:d9:d4:77:fc:9c:84:05:7d:f6:
69:4a:06:20:2a:da:b9:2b:30:18:5b:e5:bd:5c:bb:
6b:d3:e8:17:fe:23:89:1f:de:6e:02:66:26:e1:53:
21:e7:1a:32:84:11:c0:f1:ed:5f:69:02:a1:47:88:
a3:2c:34:6e:99:15:5a:65:0d:ab:dc:4f:ce:ae:d5:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
33:43:76:ef:ee:8d:0f:98:f0:27:06:33:58:c4:0a:99:10:ba:
4b:3c:d4:82:73:7b:32:66:bc:72:57:ba:a4:65:ad:d8:26:db:
2b:53:cc:01:96:60:41:b2:71:65:9c:3d:b9:52:2c:59:68:b7:
d9:c6:1d:24:60:00:b1:8d:7c:c3:46:a9:4e:d3:b6:0b:dd:65:
dc:f9:0d:52:1c:88:20:0d:09:4a:a6:12:32:54:d9:e6:1e:8e:
4b:f4:da:5c:e5:06:13:0c:ae:be:62:8b:5f:8c:88:32:38:22:
f4:2d:60:71:00:42:b2:3e:f6:46:b9:41:4c:b9:26:13:b5:bd:
ed:86:32:80:8b:fa:7c:8a:19:e8:c9:13:f0:2d:c8:4b:c1:31:
3d:1b:0d:f5:92:12:a3:3b:af:e6:70:4e:f6:4b:98:43:5c:55:
4b:07:53:d8:42:84:78:2b:3e:0c:23:2d:d1:34:3f:36:89:2d:
75:a6:95:6a:53:a3:b2:77:48:d3:13:9e:c4:ce:fd:ba:d7:7d:
4b:27:e4:96:b8:f7:30:85:33:2b:6a:da:17:bf:cd:ee:80:ae:
9b:30:21:ea:5a:b9:e3:9e:3e:60:42:51:16:e3:b5:84:b6:e3:
55:ba:9a:35:68:ca:1a:0e:9d:79:f4:d0:c2:a0:30:75:33:c6:
ec:47:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:13:17 2024 by rpki-client on console-fra.rpki-client.org