Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
File: jolfHicMY17GHfmpf8D2aMCo9Ug.cer (raw, json)
Hash identifier: gGFYqIlzlj/A+9Lw0V8lBZXGDmbh8d0TP3zrsM6Cyzk=
Subject key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7EC8ED43D84988CAFCFF8A8E4E8DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.33.114.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ec:8e:d4:3d:84:98:8c:af:cf:f8:a8:e4:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:ca:b8:e8:bd:2a:b3:ea:c7:a1:62:13:1c:
cf:09:54:33:50:5f:24:a9:d2:e3:d7:b3:32:00:3d:
b6:ee:d3:b6:08:83:b2:79:f1:20:5d:48:c9:1d:8e:
86:11:76:81:41:70:6b:5d:e0:62:c5:e6:bc:72:86:
6a:a0:55:8a:dd:d6:4b:3f:1b:3a:47:62:d5:07:9e:
fb:88:78:4d:7b:78:40:a5:ca:a1:5d:af:06:15:a5:
86:42:21:ec:4e:4b:b2:c2:55:38:b6:ce:57:67:56:
e8:8c:a2:9c:4e:ed:c2:b1:19:ba:6c:51:20:fe:3c:
6a:4c:c9:34:fd:44:3d:4a:57:a3:1b:0c:b6:83:b2:
42:d0:31:7b:5e:15:21:83:f7:c2:9b:2a:f5:e4:80:
47:c0:b7:fa:f5:14:17:5e:ef:2d:a8:d4:60:bd:e6:
04:07:88:33:91:ba:8e:de:1b:29:cb:0e:f8:a5:01:
48:14:28:ee:e0:36:ac:61:15:e4:27:35:f7:af:21:
ce:69:54:3c:83:ca:80:fa:cd:1e:c8:ec:59:b8:e4:
27:51:43:0a:76:81:d5:dc:4c:c1:c1:5f:e5:74:67:
d5:52:fe:90:98:c9:3a:dd:37:58:bf:b1:ed:45:ff:
a1:f6:19:a7:51:45:6a:52:37:78:be:2e:f2:2c:07:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:b2:f9:51:6f:17:2a:7c:da:b3:d7:80:0f:ca:10:de:e6:
85:95:39:04:7b:e3:44:59:4b:e4:a3:a4:5c:8c:81:32:d2:00:
5d:77:30:ff:54:fa:12:e2:a1:9d:3b:8c:bd:90:77:d8:ee:84:
be:46:4d:d3:ec:0f:e4:1e:cb:46:ec:21:2f:38:75:d5:0e:2c:
db:e0:a9:e1:cb:1b:c2:f9:2c:9f:33:97:49:00:b4:3e:a2:5b:
1f:20:bb:1c:8a:42:6c:0c:af:b3:f8:6d:8a:e7:ce:c9:c8:9c:
1b:68:3b:5a:9d:fb:a9:56:8f:17:1a:c4:5e:02:45:b7:93:6b:
2a:96:ad:5b:ae:ff:9c:34:0f:89:7a:5a:82:7b:5e:c1:4a:41:
24:26:e5:82:4a:8d:2d:37:ea:db:5b:e1:00:04:5d:d3:8c:70:
a7:d1:f1:03:16:ee:53:f2:6a:5e:27:55:f8:cb:e2:23:71:38:
dd:1a:c5:8d:ae:ec:19:e7:2a:82:95:d0:9d:27:d2:77:95:07:
c2:0e:7a:a6:b4:ce:14:dd:71:c0:ab:dd:14:65:4f:d0:58:81:
d9:99:c5:c5:24:39:a1:1b:22:c2:c4:9e:c7:99:83:3d:99:72:
51:92:64:5d:74:bd:f3:e0:62:c0:f0:69:35:4f:90:fc:58:9d:
8d:d4:82:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGt+yO1D2EmIyvz/io5OjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTg5NWYxZTI3MGM2MzVlYzYxZGY5YTk3ZmMwZjY2OGMwYThmNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprDKuOi9KrPqx6FiExzPCVQzUF8k
qdLj17MyAD227tO2CIOyefEgXUjJHY6GEXaBQXBrXeBixea8coZqoFWK3dZLPxs6
R2LVB577iHhNe3hApcqhXa8GFaWGQiHsTkuywlU4ts5XZ1bojKKcTu3CsRm6bFEg
/jxqTMk0/UQ9SlejGwy2g7JC0DF7XhUhg/fCmyr15IBHwLf69RQXXu8tqNRgveYE
B4gzkbqO3hspyw74pQFIFCju4DasYRXkJzX3ryHOaVQ8g8qA+s0eyOxZuOQnUUMK
doHV3EzBwV/ldGfVUv6QmMk63TdYv7HtRf+h9hmnUUVqUjd4vi7yLAc5CQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFI6JXx4nDGNexh35qX/A9mjAqPVIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2JjNTNk
Mi05MTM3LTQ3OTktOWU0MS1lNjlhMDE3NDg1ZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYmM1M2Qy
LTkxMzctNDc5OS05ZTQxLWU2OWEwMTc0ODVmYi8xL2pvbGZIaWNNWTE3R0hmbXBm
OEQyYU1DbzlVZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwiFyMA0GCSqGSIb3DQEBCwUAA4IBAQAbAbL5
UW8XKnzas9eAD8oQ3uaFlTkEe+NEWUvko6RcjIEy0gBddzD/VPoS4qGdO4y9kHfY
7oS+Rk3T7A/kHstG7CEvOHXVDizb4KnhyxvC+SyfM5dJALQ+olsfILscikJsDK+z
+G2K587JyJwbaDtanfupVo8XGsReAkW3k2sqlq1brv+cNA+JelqCe17BSkEkJuWC
So0tN+rbW+EABF3TjHCn0fEDFu5T8mpeJ1X4y+IjcTjdGsWNruwZ5yqCldCdJ9J3
lQfCDnqmtM4U3XHAq90UZU/QWIHZmcXFJDmhGyLCxJ7HmYM9mXJRkmRddL3z4GLA
8Gk1T5D8WJ2N1IIu
-----END CERTIFICATE-----
Generated at Fri May 3 11:59:45 2024 by rpki-client on console-ams.rpki-client.org