Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
File: jgo5Gq64_HyDP4JX16nnSlWzOv4.cer (raw, json)
Hash identifier: DMnBUEBmEJGcElXVN4ZneMqJi32YiGj9+wtapuG9j44=
Subject key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011BD04F0660602120DEF16EA2644E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.187.132.0/22
IP: 2a0b:a580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1b:d0:4f:06:60:60:21:20:de:f1:6e:a2:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:1d:74:e0:c0:06:92:3a:22:a0:a7:a5:05:
55:7a:9c:97:ae:ca:87:c2:ee:ab:4e:9b:d6:ec:b7:
9a:dd:43:db:6a:6b:86:10:a2:f7:96:10:5a:66:3d:
24:08:df:e3:17:48:1f:28:e0:b0:f1:6d:0a:2c:f2:
e3:a7:7c:92:06:19:32:a4:26:ea:c0:e9:04:ba:1a:
30:45:27:fb:f3:3e:6f:86:56:de:80:30:ad:20:18:
40:43:00:70:88:75:73:96:41:6f:83:20:42:c5:4e:
b8:1c:42:02:a3:06:80:a2:f4:25:97:0a:d6:01:3b:
fd:f3:4e:0e:7d:c0:b7:c6:41:a8:a7:f1:83:fc:61:
82:fd:c7:dc:89:1d:d1:4f:e2:36:0a:c9:37:25:54:
ea:e8:46:b7:24:5e:39:d5:17:28:c6:96:a5:3e:db:
60:b5:47:71:c5:3c:dd:2d:8a:57:35:c1:1e:68:32:
84:68:f8:3f:5c:5e:20:26:dd:40:ed:ea:fd:44:16:
72:6b:ad:bf:a4:0b:4d:5a:83:c0:92:20:79:48:03:
21:11:66:df:05:d8:62:a5:1e:62:1e:78:01:3e:65:
69:86:21:2d:fe:12:ac:a1:86:5f:98:84:5a:bc:a3:
9e:b4:53:0b:2f:21:4c:b2:21:84:7d:7a:e7:3e:26:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.132.0/22
IPv6:
2a0b:a580::/29
Signature Algorithm: sha256WithRSAEncryption
08:db:5b:da:0b:70:92:22:a6:d5:39:91:cc:c9:78:93:09:80:
e8:22:1f:42:e0:8e:49:5b:61:f2:ca:cc:a0:98:85:ba:ad:4d:
23:a8:e7:b2:f1:f0:55:78:cb:b3:62:01:27:2b:89:34:3e:74:
b9:52:9c:2b:1a:e3:b5:f6:91:17:0d:d3:51:4c:8b:0b:31:eb:
aa:d4:7d:75:b5:a6:07:93:eb:0d:49:11:86:f4:e5:a4:e8:a1:
95:03:11:9e:86:41:22:51:24:50:89:6a:75:16:5c:ed:ae:b8:
fd:03:23:8e:4a:fc:99:dd:cb:ce:2b:0a:32:8b:29:30:99:c1:
f7:58:4f:23:c4:da:7b:a4:9d:c0:f0:61:68:bb:98:fe:03:64:
c3:fc:17:27:ec:db:53:d8:02:df:fc:2d:cf:64:51:6f:10:39:
10:d2:22:e4:c0:89:4d:0b:d7:09:c8:88:03:2c:93:62:a7:ca:
1d:95:ee:c6:1b:4b:35:6f:38:72:7a:52:ab:f1:ee:c2:0b:9b:
51:4c:8e:33:67:66:95:cd:12:84:85:a3:7b:ed:27:ff:b5:2a:
ca:1c:fb:a4:10:66:54:29:ca:b7:ed:fa:6a:69:d2:31:ca:40:
b5:c4:9a:dc:13:71:21:88:3a:3d:52:44:30:a5:e4:87:3a:10:
2b:7e:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:51 2024 by rpki-client on console-ams.rpki-client.org