Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.cer (raw, json)
Hash identifier: Hy8hXANei232GXtKKiJgg0wcO0zgRiUav7xxQ8/vgYI=
Subject key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50017E5265384A10E159B2F7E4EE978
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43006
AS: 49425
AS: 206036
IP: 45.75.128.0/17
IP: 185.169.144.0/22
IP: 217.70.224.0/20
IP: 217.148.240.0/20
IP: 2a0a:4900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:17:e5:26:53:84:a1:0e:15:9b:2f:7e:4e:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d66032e08894118d7998c5c060ca46eb3871338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:12:06:23:99:7a:58:e5:83:05:94:b9:8d:
c9:fc:9d:4f:18:81:b0:0a:c0:28:59:06:0d:81:c4:
e0:48:19:0d:e1:72:4b:a9:5e:96:9e:11:bd:21:f4:
a3:a0:0d:5f:3c:cf:1e:ac:1e:60:84:ce:f6:6e:80:
e7:f4:1e:a1:6b:f7:76:8a:52:1d:b1:71:08:eb:52:
9b:fa:80:f7:d5:77:a4:fa:67:33:63:c4:1a:3e:fd:
3e:9e:4d:89:ef:15:6e:cc:9d:78:56:96:9e:9a:98:
df:f2:98:31:aa:7c:5c:69:a3:47:99:af:9b:d3:36:
d4:4e:81:e3:8b:58:c7:c2:bd:17:1d:eb:2d:07:ef:
d6:e8:4f:0b:fc:a1:9a:13:d5:76:b5:f1:09:37:78:
d0:df:47:b1:b4:41:bb:ea:c4:1b:1d:cb:7e:dc:9e:
89:04:90:05:cd:24:fc:4a:94:a1:d5:17:24:61:3e:
d3:dd:b3:23:1f:cd:ad:37:34:f8:a6:ec:8b:a4:06:
0a:20:30:eb:e9:96:e7:87:4f:c8:7a:58:2f:03:f7:
85:70:a3:e4:9a:9b:77:aa:df:ed:ed:f4:d2:7d:88:
34:c8:ef:32:40:67:02:5e:b6:f5:53:f5:98:31:ec:
8f:38:a3:1d:10:9f:dc:bc:05:dc:4b:2b:80:de:10:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.75.128.0/17
185.169.144.0/22
217.70.224.0/20
217.148.240.0/20
IPv6:
2a0a:4900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43006
49425
206036
Signature Algorithm: sha256WithRSAEncryption
2b:13:81:23:c8:3d:db:c7:d9:b6:be:22:23:c9:26:aa:2f:6f:
73:7d:8c:b1:47:45:89:a8:01:56:b1:73:a9:3b:63:f6:2e:aa:
6c:f7:c0:2e:7f:b9:5d:27:e5:4a:25:8c:62:d4:bc:ea:2b:a4:
fa:58:fb:a2:cc:61:87:68:19:6e:a6:d8:84:a0:ba:db:93:3d:
79:be:5d:84:0a:2d:65:49:e4:9e:6e:c9:ee:16:69:5f:97:98:
e9:a8:03:83:08:cf:7a:da:e8:c8:97:68:66:c1:87:54:2b:3f:
73:de:b5:3e:24:60:95:d4:6b:c4:d0:83:88:54:d2:c7:eb:35:
d3:57:d1:9a:58:4f:fc:b2:3a:e0:02:64:0c:ea:43:42:1a:28:
98:bd:37:17:2f:62:7b:80:d5:fb:89:5f:92:8d:75:2c:f8:fc:
b9:1e:08:1c:a8:43:fd:9f:ac:a9:16:73:1b:11:a8:56:ec:57:
77:69:da:c2:2b:84:eb:91:e8:6b:70:50:a2:38:30:24:cd:3f:
a9:7f:e6:2d:a4:a4:04:0e:c9:94:c8:39:09:1c:ad:be:76:80:
ff:de:6f:26:0d:22:ba:1a:52:68:08:4e:1e:b0:c7:fe:15:e4:
4b:36:ba:5a:be:c2:ce:6d:fc:ed:d3:cb:ef:41:f0:e4:b6:66:
a4:96:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:24 2024 by rpki-client on console-fra.rpki-client.org