Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
File: jpC9KHAFDIRHehYesJDwXrliAWw.cer (raw, json)
Hash identifier: vGqp7hpP3BbVx5Zb+ItCOlFhQUFHU4glbhPTzm5okzI=
Subject key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50113892896F23381C769935F4260B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 136.201.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:13:89:28:96:f2:33:81:c7:69:93:5f:42:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e90bd2870050c84477a161eb090f05eb962016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:19:5e:a6:ec:fe:77:fd:34:aa:e8:d0:c2:
f4:e2:99:1a:3e:e3:5b:d4:11:4d:f4:02:de:a9:75:
27:a5:d2:ed:e1:13:f3:3d:55:32:82:0f:b5:b0:2c:
a0:6d:23:35:5c:b3:cc:de:b0:e1:43:d1:95:c3:e6:
fb:d7:05:d7:c6:97:00:77:bd:4c:91:f9:0d:2e:55:
ca:c7:6f:3b:0f:f9:da:6d:c0:f8:9e:c4:8a:81:07:
e5:e9:70:15:0b:ae:6e:03:25:8e:dc:6b:6d:78:cd:
2a:45:a6:33:e5:cc:68:ea:05:7a:02:02:37:2b:1a:
83:33:a6:ba:d0:fa:a2:6e:66:7f:8a:f5:20:30:d9:
c5:06:18:88:eb:6a:e4:19:52:49:96:01:90:1d:41:
17:e2:b1:e9:3d:49:72:42:a3:ed:b9:3d:9f:b7:46:
d5:6d:c8:70:d2:74:6b:00:72:71:04:9c:18:7b:4d:
69:6d:1e:9a:0c:05:87:0e:a0:01:d2:86:13:90:2b:
95:b5:64:94:86:95:8c:59:51:92:d1:d7:b1:96:12:
bd:6f:f0:37:f1:8b:4e:9f:31:11:d0:18:5f:32:cc:
3a:03:87:2c:06:71:16:22:84:cc:61:af:e8:62:eb:
e7:d3:41:73:d3:67:cc:00:5f:5b:47:28:cb:ed:05:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:80:f1:bf:c4:bf:a1:7f:d2:c5:0b:6e:34:40:84:99:30:e1:
ad:e5:fc:0c:41:f6:86:ca:b5:2f:19:f0:d9:c2:21:f5:f8:27:
e1:e1:51:55:a7:2a:68:ac:c6:ef:71:fb:3a:40:9e:fc:d8:d4:
0d:e4:58:3d:0f:19:34:c0:6e:f9:63:74:d7:3a:4b:fd:40:2c:
34:68:07:d3:67:40:c9:07:2b:b3:a9:d1:69:fc:27:fc:07:c8:
7c:33:0f:a7:ab:1b:b1:3d:62:dc:bb:ba:89:62:c3:4a:63:bb:
c7:85:fa:ac:44:22:76:8c:a5:0a:ca:0c:f4:7e:36:a0:0d:01:
f4:12:01:10:97:26:4e:cb:b9:b9:68:b6:46:48:82:a5:19:08:
93:48:9f:18:ab:5f:cf:c1:39:37:f0:a1:88:a6:90:f9:38:24:
f3:e4:72:76:10:81:bb:36:27:d6:e8:89:d4:e1:63:e6:50:a0:
9d:46:4c:aa:89:6a:52:46:a8:53:27:39:16:1f:5d:4f:30:58:
94:8a:6c:28:44:65:95:be:9e:31:b6:88:fd:a7:34:df:56:ca:
5c:47:61:89:8f:c3:7b:23:e9:42:80:6d:e9:e6:06:14:21:72:
7b:2d:05:f5:68:cd:ca:c1:f2:7b:96:15:74:58:8f:7b:a1:d0:
93:f8:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:57 2024 by rpki-client on console-ams.rpki-client.org