Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.cer (raw, json)
Hash identifier: gJjLz8SssjFi9hU+NA1oRO8hmXtqyDYUUU5ZDyFLRQU=
Subject key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF3D645048247EE446986C343A16B36C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 07:48:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197838
IP: 91.228.8.0/23
IP: 94.154.16.0/21
IP: 2001:678:a74::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:d6:45:04:82:47:ee:44:69:86:c3:43:a1:6b:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 07:48:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:6e:df:f0:85:e8:76:00:31:5f:da:e9:69:
76:1f:63:a0:85:ae:24:d2:3e:83:79:75:17:66:1a:
9f:9b:b0:17:67:7b:b2:e5:5e:b6:4b:ae:52:58:c4:
b3:db:4a:89:5b:2b:a6:dc:23:51:2a:9f:a7:f9:df:
93:74:a5:0d:41:53:a9:8d:f5:22:c1:28:cc:c1:0a:
ed:2b:d9:e5:54:f1:2c:dd:f0:7c:c7:75:b7:64:47:
a0:d1:71:f5:f0:03:ce:79:67:de:cd:fb:94:cc:aa:
f2:7b:6f:0e:b5:1b:2d:c8:a5:f8:5c:ef:3e:7a:a3:
6d:b6:5e:4d:87:35:a8:f2:38:f0:2d:41:7d:2f:f0:
82:da:46:71:38:4b:c9:96:43:f1:fc:e3:6c:10:0f:
2c:8f:20:63:f3:54:2b:f0:fc:d6:f8:a4:f0:cf:66:
f9:97:0a:4c:c7:9b:41:88:55:cf:ef:de:1b:3c:02:
04:06:a6:b3:65:7d:95:76:f7:58:f9:dd:5e:7a:c3:
7e:63:c7:17:2b:4e:44:55:bc:59:3c:bd:ef:21:52:
43:ee:95:89:81:b3:60:39:6b:27:d5:45:18:8f:80:
c7:c3:e3:17:79:ac:82:83:23:3f:71:ba:d0:c8:07:
cb:83:ca:14:fe:b7:7d:ac:2a:0f:50:46:af:64:d0:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.8.0/23
94.154.16.0/21
IPv6:
2001:678:a74::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197838
Signature Algorithm: sha256WithRSAEncryption
03:21:8b:6b:99:2e:b9:ec:35:ea:75:31:3a:5e:b8:24:e9:41:
4b:19:f6:10:36:b3:09:0d:29:ad:02:f3:ef:25:45:49:48:f1:
11:45:ab:20:a1:82:0d:cb:7b:19:e4:4f:a7:7f:1e:53:60:a0:
3b:2a:76:0c:83:5e:5c:b8:bf:eb:24:12:2a:e8:d4:26:a5:e7:
a7:c4:ea:32:01:ba:88:bc:f5:36:6f:d5:4f:d7:d5:4e:41:db:
1c:9c:f2:ec:87:04:a0:83:89:24:0f:98:7d:81:17:4a:a0:c3:
d1:46:b9:66:34:aa:d0:7e:18:37:67:9b:32:ce:5e:9c:97:b3:
9f:e2:53:aa:9a:17:23:d5:5b:4d:dc:fa:39:5f:17:84:6d:2c:
d4:fa:61:f4:fa:07:9d:3b:26:99:1e:b3:03:8e:3e:07:04:90:
40:7c:69:59:ee:f6:2d:44:65:19:eb:48:2d:27:35:cb:8e:e3:
8b:a6:e0:f7:64:a6:81:26:a9:00:b4:d5:5b:54:09:ca:98:02:
96:a7:f4:f9:65:5d:02:93:00:ea:8f:21:7e:68:77:3f:fd:4c:
0d:c4:6d:c4:e1:c7:22:6a:3d:f6:4f:1e:6c:2a:98:00:a7:64:
69:eb:1c:5a:7f:7d:13:0e:1f:b3:5a:65:e1:c4:39:0a:c1:5a:
0e:d8:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:48 2024 by rpki-client on console-ams.rpki-client.org