Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.cer (raw, json)
Hash identifier: VHYfitwZ8RhZlo0NBx7uGZSD5UiYxzjxaSudVI7G5I4=
Subject key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247441B88B4A391C4241EA2AD9885C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208896
IP: 45.15.248.0/22
IP: 45.86.196.0/22
IP: 45.132.168.0/22
IP: 45.156.196.0/22
IP: 2a0e:87c0::/29
IP: 2a0e:a140::/29
IP: 2a0f:6c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:74:41:b8:8b:4a:39:1c:42:41:ea:2a:d9:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:de:c1:90:48:33:c0:ba:c2:be:b4:1f:d4:
8d:5a:ed:28:06:67:64:e2:db:af:f5:41:1c:ad:91:
e9:ec:62:b8:04:34:09:3d:81:b2:6a:71:4f:95:e2:
30:8f:0a:6e:a5:23:a3:93:83:fc:ff:ce:9e:88:36:
2a:77:3d:e9:5a:f0:ae:0d:91:bd:0c:0a:4f:98:46:
b5:a0:46:c9:04:db:de:d3:6c:3d:0c:93:1c:dd:72:
46:6e:ec:95:7b:cb:ce:46:1e:d0:28:eb:33:7b:16:
56:a4:54:6c:0c:91:1a:8a:98:65:9f:81:45:7b:b2:
07:68:39:8b:81:10:09:7d:1e:76:3d:b5:47:c3:ac:
97:1d:fe:55:b8:ea:1b:7d:4f:1b:28:6d:86:ab:99:
10:a8:8b:16:60:cb:a1:11:c2:8d:24:c7:18:90:fc:
36:d8:8f:ea:10:a4:62:c8:82:d3:79:b6:0f:fb:09:
75:ba:18:b1:65:19:0b:26:4d:fa:b7:59:63:fd:7b:
52:6a:18:80:b0:61:2e:9f:2a:c5:fe:60:76:f2:71:
ea:63:6f:18:37:63:ea:6c:c2:67:49:75:1c:9c:bb:
6d:2b:d2:62:9b:46:cc:1f:a7:20:31:f7:43:eb:e6:
25:00:de:ec:60:40:01:ed:60:5a:52:8c:d0:e6:3b:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/22
IPv6:
2a0e:87c0::/29
2a0e:a140::/29
2a0f:6c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208896
Signature Algorithm: sha256WithRSAEncryption
5e:dc:8b:d0:0d:6c:fe:a3:4f:9a:de:e2:62:70:16:22:f9:b8:
18:3e:1e:34:2d:31:f5:46:50:39:49:fc:8f:31:b7:e5:8b:36:
87:17:a7:fe:5b:41:7b:f1:4a:7d:72:a6:be:56:11:6e:e9:4d:
38:b0:07:ac:04:69:9d:a6:c1:9b:eb:6c:0b:61:89:49:5d:64:
0d:67:c5:e6:8e:7c:f6:3c:d8:f6:57:ad:6b:ef:00:20:6a:3b:
d4:cc:b7:a2:c0:26:d2:05:8f:fc:ff:d3:06:2c:14:02:cc:e1:
22:e9:2e:2e:d2:fb:5f:e6:78:82:31:27:1b:b4:0a:25:3e:aa:
39:48:92:20:e6:5b:10:a0:65:15:23:74:cd:52:04:2b:11:90:
7c:bb:08:07:ea:64:d7:1b:77:f7:d7:8b:cb:21:9e:d2:58:fa:
6f:7f:a9:ae:6d:36:19:ec:c7:c1:c1:00:80:5a:df:5b:28:fc:
07:f2:bb:bc:5d:2b:98:c9:e6:96:84:f4:a2:94:06:60:ff:8a:
15:c2:c4:8a:c0:9d:1f:be:99:f5:1a:2a:45:0c:6b:ad:e3:29:
8d:25:74:d0:c7:d2:23:84:73:61:ae:b9:77:22:09:37:f7:b2:
72:0c:83:06:c2:ed:0f:fd:59:5c:b3:23:9c:4d:2c:1a:77:2d:
19:e4:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:38:23 2024 by rpki-client on console-fra.rpki-client.org