Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
File: jnADx8Z3zDvWhgMXaZKj69AvRss.cer (raw, json)
Hash identifier: Oa3vD1s0SrtBrvVGjjPza3ekErXkM3a8ekGw857ZLtM=
Subject key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B4F3A63317E7CB6EC4247F97E6144
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200612
IP: 185.100.208.0/22
IP: 2a07:4340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4f:3a:63:31:7e:7c:b6:ec:42:47:f9:7e:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:f3:59:9c:5b:82:04:0f:9f:7d:74:8c:ef:
14:1f:4c:a2:57:9b:05:c9:3e:81:a9:56:8a:0c:84:
18:be:5d:be:11:95:43:81:c7:7f:63:52:de:2a:6f:
22:55:af:d4:29:2e:28:e1:06:36:48:88:8e:2c:37:
7e:fe:13:a6:48:53:13:bc:75:29:f7:f4:21:7a:8a:
9c:64:b1:05:a7:4d:72:0b:fd:11:05:88:82:7a:9f:
56:ef:0c:93:fd:a9:f4:c3:74:ea:bd:19:b4:02:95:
a8:9a:13:64:78:53:12:c9:61:30:9d:ae:47:dd:81:
c2:fd:e7:21:d5:b1:1d:fd:84:30:ba:5d:f8:e9:ca:
1a:98:ce:12:9b:fb:04:8e:88:48:44:25:6e:02:05:
14:7a:8c:40:69:0b:dc:ee:97:20:e6:fe:8c:17:71:
8f:2f:ed:ce:5c:7f:d9:78:b5:59:cf:ef:f3:d4:43:
93:6b:85:0e:9a:5d:d7:d8:dd:e9:93:cc:7d:00:de:
85:6c:b9:e6:c8:75:51:b6:97:bf:3c:a6:8a:77:5e:
ec:a8:b0:e6:fe:4f:75:9d:38:03:4a:83:29:7f:7b:
92:9b:b3:b2:5f:e5:b2:99:f6:55:db:f4:6c:3f:a4:
c9:4a:a3:d1:e8:37:54:55:11:c3:71:59:2c:b3:87:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.208.0/22
IPv6:
2a07:4340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200612
Signature Algorithm: sha256WithRSAEncryption
0d:c0:bf:90:08:9a:2d:b0:20:78:8f:af:02:8b:00:99:5a:1e:
8d:69:82:66:6d:ab:aa:bb:5a:77:01:34:19:d6:d4:1b:05:5c:
46:52:dd:73:fc:a9:94:c9:a0:0e:48:35:e6:37:b6:f3:d5:95:
23:be:30:07:f0:fa:fc:a4:70:47:f2:5f:a2:59:ea:55:13:56:
d2:fb:49:78:f2:9b:f7:8e:b0:00:cf:ef:cd:d3:35:68:70:ac:
e3:44:ec:c6:74:14:2d:64:f1:4a:44:e5:bf:92:af:3a:8a:ba:
24:da:19:7a:25:ff:5f:69:e2:2e:fc:6c:09:35:81:f5:02:b2:
80:84:8b:fd:82:39:ff:2a:12:1a:69:5b:93:51:6c:2b:eb:c2:
2b:52:50:a8:77:73:ec:66:3a:6a:67:9c:1c:38:96:5e:e9:16:
b4:7e:12:75:78:cb:c9:a3:ea:43:58:b5:2e:1f:5d:9b:20:d1:
fc:c5:0a:d4:8e:e0:67:e3:4f:88:b6:44:e4:e9:b8:61:31:10:
c7:40:d7:28:6a:2a:6d:17:60:e8:59:28:d0:6d:4a:04:9c:52:
79:36:74:64:44:03:ce:2a:38:b0:15:23:03:4b:4e:9c:bb:cd:
8c:04:d3:30:13:90:80:fd:8f:12:e3:fd:d7:de:3f:36:2f:ea:
a5:92:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:59:44 2024 by rpki-client on console-ams.rpki-client.org