Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
File: jfPflxqnyyXft8tVspyHvL4yCCk.cer (raw, json)
Hash identifier: lwsEUqjFWbgQ7QtQ3Jjd+H1XYAph+knDpPB7XkeCQ5Y=
Subject key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E99A5E497BD1787E7098009A71406
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199155
IP: 193.236.32.0 -- 193.236.95.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:99:a5:e4:97:bd:17:87:e7:09:80:09:a7:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:6b:12:13:ca:57:74:a2:c8:b2:5f:30:77:
ee:9e:8e:f1:a5:e3:84:4e:0b:69:38:61:bd:b1:64:
ce:ae:d7:23:6f:c1:2a:a7:24:16:f2:28:eb:0b:da:
1f:75:47:9c:23:5b:ed:33:53:6c:73:02:5a:81:11:
80:6d:cb:b3:db:b0:6b:a0:65:cd:a8:0e:1f:ac:ea:
f6:d9:de:70:38:3f:2b:86:09:2e:c6:df:09:df:f9:
d5:05:13:aa:af:dc:3c:cb:71:57:7a:aa:fc:9b:0c:
d3:52:82:50:11:68:97:bf:31:49:64:1d:cf:12:af:
bf:82:25:b3:f9:06:7d:21:b9:3b:a2:24:1a:7d:d5:
ce:df:d5:21:26:11:d9:02:3b:f0:46:91:7a:e7:98:
77:74:40:2c:3c:6f:17:b5:34:66:12:ee:8f:0f:24:
5a:7d:59:a0:a6:e8:25:e0:6a:b0:5b:60:9a:5c:aa:
49:c9:2b:ea:97:3b:4f:84:2b:4c:2d:d3:92:1c:7d:
52:8b:8f:27:eb:25:aa:88:67:f0:34:20:b9:7d:a7:
3e:18:19:d2:51:60:37:d4:64:0e:4e:40:2d:a5:f1:
72:5d:28:d4:09:a0:dc:fa:da:de:51:f0:a8:bd:59:
97:b8:5b:2b:10:e1:2e:26:c3:32:0a:e7:87:d0:6c:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.32.0-193.236.95.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199155
Signature Algorithm: sha256WithRSAEncryption
4f:2f:bb:16:24:34:e5:c2:ec:80:90:99:36:c8:4d:34:b4:99:
31:3d:4e:42:3d:8f:da:ae:8b:02:b3:65:be:fd:92:a2:af:f4:
e3:e1:e3:0c:05:b3:ea:f2:e8:dc:8e:ce:b3:1d:95:d6:ca:99:
12:07:9a:26:36:fd:d3:56:59:32:70:8e:08:d0:3d:60:bd:58:
46:9a:85:da:48:c2:4e:91:f3:97:15:61:73:04:54:58:fe:25:
2e:40:80:85:9d:97:8d:dd:86:4c:ab:27:51:24:90:43:33:a1:
87:1a:8d:17:d3:8b:06:24:5a:d3:36:43:98:a7:7f:52:66:cc:
3b:50:85:17:86:13:a4:f3:8c:ec:7f:91:79:0c:ec:5d:c0:76:
ca:cd:94:d8:8b:c7:f0:1f:13:aa:12:83:d3:53:96:c7:f4:23:
31:8a:67:24:cf:72:4f:4d:58:cf:7e:9c:92:83:ec:20:9c:d3:
06:ef:b9:24:8c:43:40:6f:0c:16:d4:cf:90:1a:f3:91:8c:a9:
35:1c:bf:70:4e:01:42:eb:53:36:57:51:f8:e8:b3:b7:13:84:
b8:db:5b:5b:da:39:c4:6a:00:5d:c2:09:13:f6:1a:0b:9f:bb:
7b:c4:5a:aa:94:22:95:76:49:da:de:68:47:5e:4f:48:39:c7:
3a:25:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:13 2024 by rpki-client on console-fra.rpki-client.org