Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
File: jlexRHZCwU8RwEtkHPHY3orax4Q.cer (raw, json)
Hash identifier: MMSWpjymKbPdjVC6QxStVMk2vAg4qH+1Hh0v/G+weS0=
Subject key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492FF1CA8B761BD184ADD431083AA3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35213
AS: 205239
IP: 91.201.168.0/24
IP: 91.205.64.0/22
IP: 91.229.101.0/24
IP: 91.239.136.0/22
IP: 176.111.51.0/24
IP: 193.0.247.0/24
IP: 2001:678:31c::/48
IP: 2a13:61c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ff:1c:a8:b7:61:bd:18:4a:dd:43:10:83:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:2d:1e:46:28:5a:15:21:98:1b:b0:da:9f:
2f:37:d0:2b:f1:78:05:87:08:1a:6f:63:55:27:f4:
b8:51:86:e1:fb:96:6c:24:fc:6d:43:35:1a:44:64:
06:34:85:33:7e:c8:99:e4:08:98:5f:db:8b:e6:ef:
e9:63:5b:f2:a5:38:b5:5b:dc:1b:38:c3:21:94:40:
13:e1:de:80:a4:8c:ee:0a:88:38:83:39:12:28:49:
1d:e0:f9:4d:7a:72:fa:bf:71:d0:36:6a:e7:11:3b:
bd:7f:98:9c:a3:77:b2:e3:ec:2e:19:b0:fc:2e:6e:
c0:c2:7a:b5:44:b1:5c:c6:6d:5d:3f:59:c5:dc:6d:
a4:ee:dd:a2:44:fc:91:bb:5f:06:7b:e9:14:f5:e7:
24:26:e4:6b:f3:3b:f6:1c:7e:0f:8e:44:7c:1f:d9:
5e:4d:57:7d:6d:bb:7e:18:47:de:b8:07:21:29:64:
3d:c3:3a:b6:09:61:25:20:eb:27:ba:25:bd:98:3d:
c6:5b:07:28:df:44:63:05:fa:26:6a:df:30:07:d8:
ef:6f:4c:56:72:c5:74:64:48:46:df:8b:98:39:c9:
78:61:b9:8d:84:d7:28:64:5d:21:ea:ae:12:c3:66:
e4:7c:df:8c:3b:bb:8b:0c:b8:fc:ad:b0:3d:71:35:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.229.101.0/24
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
2a13:61c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35213
205239
Signature Algorithm: sha256WithRSAEncryption
41:38:bd:26:b3:d0:13:ae:e1:8c:4f:79:37:6b:f1:3c:c9:d3:
55:de:01:0c:3e:33:4d:3c:91:5e:01:da:0f:d5:04:ec:40:3b:
45:37:6c:4d:71:f8:4d:65:9a:61:7b:3b:3b:c2:db:01:87:f6:
ea:e9:71:60:69:c5:d5:c9:a1:7a:6e:23:36:4d:e2:56:bb:a0:
5b:84:74:f4:5a:e3:5f:00:26:ad:df:07:e1:5b:1d:de:be:a2:
65:8b:b1:42:c8:19:bd:5f:c4:02:57:a9:9d:25:cf:8d:66:a1:
40:74:19:2e:c1:9b:ca:b0:87:0e:c2:7f:ad:74:27:b0:3d:03:
69:d2:46:09:61:40:31:e8:6d:66:1b:d0:4d:8b:3f:ae:5d:5a:
28:07:e7:fb:0d:41:7b:7c:75:81:46:40:cf:c2:8d:bc:42:6b:
a0:75:7b:5f:72:07:a1:96:ac:68:b9:15:cc:44:04:b1:71:af:
dd:91:6d:1f:99:d3:df:44:f1:0d:ff:7f:ec:6a:5f:3a:f5:a3:
b9:c8:25:3a:8c:5e:e1:4f:5f:5c:d7:58:41:61:b6:38:a2:c5:
e3:39:8a:45:84:4d:29:4a:98:b5:05:c9:e6:31:6e:86:a5:46:
b7:71:95:fe:82:cc:18:bc:84:fa:cb:1c:0e:1f:2e:ae:14:89:
88:67:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:59:41 2024 by rpki-client on console-ams.rpki-client.org