Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer (raw, json)
Hash identifier: osYQhJLUBfz6tyeBGN0K+z5jaXegjiw+392eglpRMho=
Subject key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206875D3631A90B717791FB07DF81172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205985
IP: 185.199.48.0/22
IP: 2a0a:9ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:75:d3:63:1a:90:b7:17:79:1f:b0:7d:f8:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:4e:1d:63:0a:f5:fa:72:a1:e3:f3:62:20:
5b:88:6e:bf:fb:f5:bc:5c:e5:05:13:99:be:8f:a6:
2a:2e:d1:1e:4a:a5:53:54:7f:5a:a3:fe:70:d0:7f:
8d:3c:6e:63:f6:48:ee:c6:02:f0:5e:4a:bb:f9:6f:
a2:6b:da:7b:be:5c:a7:d7:21:d2:b3:40:8b:4d:68:
6b:8e:f5:84:d5:56:3b:e0:d6:6f:6a:ce:bc:17:14:
1c:ae:f9:54:14:b4:e4:c0:8c:aa:d8:7e:32:7d:52:
d9:91:db:9f:98:94:6a:bc:fc:e8:13:df:14:d3:77:
37:5c:e1:d0:ba:15:ba:ff:00:6a:0d:bc:82:64:0c:
25:17:36:53:d2:79:4d:2f:8d:bf:84:bf:00:1f:13:
9e:9e:8f:e9:c9:d9:b4:74:d5:c1:83:1a:b7:36:56:
58:58:ad:80:35:77:af:b6:a8:99:1d:b2:cc:4e:d2:
5a:32:45:9d:e7:0c:eb:f6:82:d8:3b:0b:59:ca:88:
b8:c6:07:3f:63:a4:2f:f0:4f:be:e4:06:bf:00:45:
82:59:83:7b:b4:29:ef:35:d4:45:5c:3b:b7:3f:15:
19:2a:63:20:8b:ed:37:3e:97:b0:11:39:e3:0b:7c:
b5:3d:01:9b:25:8c:22:78:33:92:71:41:79:1f:15:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.48.0/22
IPv6:
2a0a:9ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205985
Signature Algorithm: sha256WithRSAEncryption
8d:c6:2d:75:55:87:2c:0f:04:e6:db:91:76:3b:7d:e1:0f:b8:
6b:e4:b9:09:ec:23:87:68:0a:45:1a:a2:0e:d1:ee:78:42:a9:
a0:8e:05:44:0e:19:fa:d9:90:39:1a:24:ee:fa:d3:cc:d6:a5:
15:38:3f:0d:2b:24:53:a7:78:f4:39:47:2f:66:9e:7e:7e:a2:
cf:38:99:0c:64:e3:b7:d5:60:7c:5b:26:0a:25:e7:ec:bd:25:
54:19:e1:87:9e:41:f6:f8:0c:bb:42:6e:2e:5f:a5:83:d0:d6:
39:94:2c:30:84:f6:07:4f:4e:7a:f5:65:9c:b2:2a:f6:0f:aa:
45:99:a1:1d:c8:6a:48:77:29:8b:f2:28:46:a8:3a:1f:11:eb:
3f:49:20:45:04:bd:43:4c:d9:68:90:83:10:22:5d:69:45:70:
ff:b2:6f:0a:47:18:03:e8:d9:30:12:2d:73:a3:02:0d:c6:88:
db:ba:52:56:d1:29:10:5b:99:44:8e:11:b8:c0:b6:72:5b:2d:
47:8f:d1:a3:e8:76:5d:68:55:b4:1c:17:b0:15:02:8e:76:09:
27:24:48:a4:4f:7b:ca:55:dd:60:44:f8:1f:25:20:f0:f4:bf:
3a:bf:32:d4:76:c3:fb:10:ee:66:26:ac:65:52:2e:52:1c:5b:
1d:e4:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:20:54 2025 by rpki-client