Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
File: jnAqYWwElB4snwcWUeScXfOu0LE.cer (raw, json)
Hash identifier: SZEFiG07/NjrbWAfgLq/5b3kwLzrxDsJU1KrS3i7omA=
Subject key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42486030F24D6E6894EE86196C45125
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.200.176.0/24
IP: 107.150.176.0/24
IP: 109.104.146.0/23
IP: 193.162.131.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:86:03:0f:24:d6:e6:89:4e:e8:61:96:c4:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:68:6f:80:e4:68:c6:78:1e:ab:08:9d:e3:
8a:7d:69:dc:62:3d:0c:5e:82:7f:d2:79:00:fc:c5:
81:8c:5a:87:2b:66:c1:49:cc:f3:74:80:c0:f7:8d:
e7:4b:0e:f8:a5:ca:90:cd:60:f1:13:29:b0:50:20:
c1:8a:11:71:c7:23:f5:02:7e:a8:6e:f0:da:e2:31:
4b:c4:48:7a:07:bc:5a:2e:9f:43:55:be:00:df:1a:
e9:83:26:03:37:68:01:83:7b:00:20:df:10:82:ac:
bd:56:61:e0:f9:81:6e:8f:96:03:e7:03:d7:81:be:
5a:1b:79:b2:d2:d2:ba:23:46:58:c8:6e:c0:64:46:
e6:41:02:8a:d7:d7:96:fa:67:c7:e9:1b:d5:c6:22:
63:e8:0f:b4:f8:72:3a:28:51:64:eb:a6:e6:0d:3e:
d5:00:6d:7f:41:15:67:16:ea:2b:58:12:22:37:78:
78:d5:88:6f:f1:b5:44:56:5d:85:cd:30:2e:13:0f:
06:87:fc:72:62:15:23:65:56:fb:cc:13:05:d8:53:
f6:c8:c7:79:79:07:7c:e1:76:99:c0:da:bc:2f:87:
f2:15:a8:cc:18:95:e9:f6:b5:bc:87:0c:c3:d5:44:
39:b9:26:91:f6:44:98:9b:4e:9b:dd:56:92:b9:66:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.176.0/24
107.150.176.0/24
109.104.146.0/23
193.162.131.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:5e:b9:45:2c:56:a9:c9:f0:2e:f5:1b:ac:0e:e3:81:2b:
4d:7c:af:8a:ca:ec:d1:89:29:70:87:ad:c5:50:6c:77:d7:76:
f9:a2:a0:1e:b1:b8:19:97:04:ca:85:13:71:b9:89:ba:98:09:
a5:05:a7:55:46:d3:ac:40:51:68:f8:aa:ff:05:89:cb:ca:3c:
34:d4:ad:65:0d:7b:79:af:a2:18:ca:ca:80:4a:04:73:38:45:
ae:f9:3b:00:e1:86:51:d7:7c:bb:e4:4a:3d:96:80:a9:5e:a3:
c9:5e:d0:a7:7c:ff:ad:c1:fa:8f:44:3a:f2:8a:6f:56:70:67:
60:4e:46:e7:29:c9:5a:55:0d:05:98:81:76:9d:70:59:83:c2:
ea:4f:4c:e7:9e:1a:1c:f9:32:b1:0a:a7:61:d3:90:be:7f:87:
39:0b:89:c9:0f:55:1f:8c:1d:ad:83:57:45:5d:83:3d:43:53:
c4:78:18:a8:a0:38:c9:c4:90:c3:ab:6a:ea:a2:bf:71:6e:90:
c9:0f:f3:2b:0a:e9:85:da:ac:23:fa:fc:e0:36:96:af:a1:93:
d2:d6:04:a7:87:86:19:ef:b5:de:3d:35:de:37:a1:70:68:b7:
43:12:c8:9f:ab:f7:69:54:56:13:19:d0:dd:e8:4e:36:cd:9c:
54:7c:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:55 2024 by rpki-client on console-ams.rpki-client.org