Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
File: jljYxh9jNQx3vvHWaxzPpaAODds.cer (raw, json)
Hash identifier: 1Z3ot/a6trLev6EnE2OaVv+b5TjGhIh4WHAaR7rCPiw=
Subject key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E524352A4B5C45B1A65645002014F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31060
IP: 193.23.49.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:52:43:52:a4:b5:c4:5b:1a:65:64:50:02:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:8e:29:be:f6:66:b9:64:03:f4:2e:52:d3:
e3:6f:0f:d1:f3:60:62:0d:ba:be:2c:1a:b6:80:32:
3b:86:71:25:9d:89:c5:51:60:97:7b:5c:a2:9c:8a:
b3:ba:fc:2e:50:ca:34:96:f3:1c:5c:d3:0d:ae:b2:
67:28:45:e5:83:c9:c6:9b:bc:67:73:78:3b:b0:a4:
78:28:ab:5d:9d:b5:72:c2:80:59:33:01:30:93:3e:
7f:07:0a:9c:f9:95:80:c2:3e:18:80:45:32:16:8b:
fb:b1:71:2a:4c:5c:52:ea:84:25:b1:91:25:95:ea:
c0:5c:ef:b8:36:f4:6b:f4:7f:86:9c:78:f6:bc:24:
65:30:12:3c:aa:f2:35:39:b4:bb:c9:8a:85:ea:21:
cf:40:fe:f3:83:6b:06:42:8c:3d:05:a6:12:8c:c3:
e3:cc:8b:57:65:1c:5f:3f:63:3d:44:4a:4c:03:f1:
43:4e:84:6b:32:71:f1:53:61:ba:3e:54:73:20:57:
7e:2a:a1:f9:a5:de:1e:34:fd:16:b7:31:ba:cd:71:
6d:15:be:08:3a:6e:a7:b3:4b:ba:1d:06:ba:33:66:
d6:29:ad:fe:c3:58:4f:50:3b:9c:e6:6b:f4:71:df:
d8:d3:5e:3d:d9:d8:fa:a4:99:c8:76:5c:5e:6b:ac:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.49.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31060
Signature Algorithm: sha256WithRSAEncryption
7e:7a:d5:0e:37:73:ad:44:9f:be:6b:c9:da:36:c1:97:7d:d2:
a7:1f:88:f2:93:5c:bb:34:98:73:62:00:57:01:56:e6:e5:4b:
b6:8f:ed:09:07:03:ba:5f:d0:66:a2:cf:da:f4:28:79:23:a2:
e0:ec:ae:f1:35:71:d9:27:c5:36:68:17:56:4a:6a:c4:17:14:
5d:f4:cd:13:35:71:87:56:40:79:ff:41:31:81:db:ba:e2:71:
02:8e:2b:a5:a6:a0:c3:5d:5c:de:83:77:db:c8:8b:4a:e1:b1:
b2:86:0b:d5:7e:02:c3:2b:d9:e2:84:53:06:3d:56:46:93:d5:
c6:e8:42:a9:d1:5b:55:19:c9:f8:53:17:c0:ec:a3:dd:2c:ca:
f8:4f:72:fb:d3:68:b1:d8:a6:f1:1b:30:c7:93:d4:bf:fd:7f:
ea:9d:12:95:52:f9:8b:d3:86:6e:d4:a9:2b:04:d7:94:50:e3:
3a:1a:37:0c:d8:87:b2:61:84:96:2d:59:44:66:22:42:a4:ce:
98:f2:fd:88:61:70:1c:3c:e1:4e:88:80:45:d9:45:8b:ea:68:
29:9e:5c:1e:ea:0f:12:2a:5f:b7:b3:24:18:46:68:ec:9c:10:
b3:b4:68:ea:e3:3e:f7:77:b7:64:62:09:36:39:79:c7:30:44:
b7:1e:7c:4c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzFblJDUqS1xFsaZWRQAgFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU4ZDhjNjFmNjMzNTBjNzdiZWYxZDY2YjFjY2ZhNWEwMGUwZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWyOKb72ZrlkA/QuUtPjbw/R82Bi
Dbq+LBq2gDI7hnElnYnFUWCXe1yinIqzuvwuUMo0lvMcXNMNrrJnKEXlg8nGm7xn
c3g7sKR4KKtdnbVywoBZMwEwkz5/Bwqc+ZWAwj4YgEUyFov7sXEqTFxS6oQlsZEl
lerAXO+4NvRr9H+GnHj2vCRlMBI8qvI1ObS7yYqF6iHPQP7zg2sGQow9BaYSjMPj
zItXZRxfP2M9REpMA/FDToRrMnHxU2G6PlRzIFd+KqH5pd4eNP0WtzG6zXFtFb4I
Om6ns0u6HQa6M2bWKa3+w1hPUDuc5mv0cd/Y01492dj6pJnIdlxea6xTJQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFI5Y2MYfYzUMd77x1mscz6WgDg3bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzMwYzU5
Mi0wYWM2LTRmNzMtOTViZi1hYjU5NTZiNGQ5NzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMzBjNTky
LTBhYzYtNGY3My05NWJmLWFiNTk1NmI0ZDk3MC8xL2psall4aDlqTlF4M3Z2SFdh
eHpQcGFBT0Rkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRcxMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnlUMA0GCSqGSIb3DQEBCwUAA4IBAQB+etUON3OtRJ++a8naNsGXfdKnH4jyk1y7
NJhzYgBXAVbm5Uu2j+0JBwO6X9Bmos/a9Ch5I6Lg7K7xNXHZJ8U2aBdWSmrEFxRd
9M0TNXGHVkB5/0Exgdu64nECjiulpqDDXVzeg3fbyItK4bGyhgvVfgLDK9nihFMG
PVZGk9XG6EKp0VtVGcn4UxfA7KPdLMr4T3L702ix2KbxGzDHk9S//X/qnRKVUvmL
04Zu1KkrBNeUUOM6GjcM2IeyYYSWLVlEZiJCpM6Y8v2IYXAcPOFOiIBF2UWL6mgp
nlwe6g8SKl+3syQYRmjsnBCztGjq4z73d7dkYgk2OXnHMES3HnxM
-----END CERTIFICATE-----
Generated at Fri May 3 13:56:25 2024 by rpki-client on console-fra.rpki-client.org