Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
File: js94ugJ10dO2SSqOnWEGE8Awahc.cer (raw, json)
Hash identifier: hyTNKBtublSbBY3TGMoqH+FLYsSvTtKL8QZ62H5i19A=
Subject key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42532E51AFDA62C6DF971287299AE1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.34.188.0/22
IP: 2a00:db60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:32:e5:1a:fd:a6:2c:6d:f9:71:28:72:99:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:36:f6:ee:7d:5d:83:90:76:36:ea:e4:98:
68:49:39:22:e8:46:34:fc:c2:51:a6:64:80:9f:cb:
61:d5:c6:ef:78:b5:71:e1:b1:b1:99:d9:aa:c6:c7:
00:00:33:cc:e5:b1:0a:70:67:9c:74:f7:86:43:7b:
ab:b9:ad:2e:09:f1:ab:a0:94:17:e1:29:11:27:d2:
fe:d7:1d:98:e2:27:51:97:07:5f:08:52:13:7d:62:
45:b2:55:9f:67:84:20:43:34:21:b3:e1:13:0d:f3:
82:4a:15:f7:44:b1:db:c4:aa:e7:f8:21:81:70:9f:
64:cb:1f:02:d9:08:24:6c:ce:99:4f:ed:24:ab:2c:
32:08:7d:9b:41:a2:f0:07:fa:67:e9:ad:7e:91:e6:
ac:f1:7b:fa:22:bc:9d:bc:ce:c6:ff:b8:49:a9:0b:
05:8e:bc:90:45:75:53:5e:bb:20:87:68:4f:b6:05:
b5:a5:fd:cb:45:bf:43:4b:93:86:32:6b:e5:f9:3d:
fa:7d:c5:f0:91:ff:45:e8:e3:ad:f2:f2:b5:13:d7:
94:94:ba:3e:10:a9:af:89:5d:a1:d5:8e:20:c8:de:
f7:91:a0:4f:86:ca:e1:a0:f6:b4:fe:b1:7e:f6:c8:
bc:de:43:16:ab:33:a9:a2:d6:96:c5:df:cc:45:85:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/22
IPv6:
2a00:db60::/32
Signature Algorithm: sha256WithRSAEncryption
07:fa:f8:46:e6:28:ad:ed:3a:3c:b5:99:33:d5:31:0b:c0:99:
12:7d:fe:fe:33:9e:35:a4:f8:13:42:51:e5:e7:85:1f:e3:9e:
6d:5a:85:aa:4f:0d:6c:ef:f2:83:b7:2d:1b:85:2c:ed:aa:41:
22:03:a0:6a:96:f4:91:68:52:0b:47:52:dd:15:2b:b2:aa:9d:
a8:b3:6f:ce:f2:18:4b:d9:57:d7:02:12:f6:ba:a4:f4:13:39:
04:ee:b9:38:4b:44:e7:a3:0d:99:b0:6c:67:64:a3:dc:ba:25:
28:43:67:7b:30:04:57:44:b0:13:a3:81:94:e7:a2:81:cd:2a:
7f:cf:4f:40:e0:93:aa:4e:ad:de:fe:94:22:4a:b3:c5:b0:e2:
ff:d6:73:f4:98:e2:06:c3:a7:bc:45:fd:7d:3c:f6:0a:50:fb:
64:11:8e:91:1a:13:9a:6a:bd:9a:fa:e8:c3:3f:31:73:79:e8:
fd:0f:48:dd:5e:97:10:4f:cd:06:9a:99:2e:9a:11:d2:1f:f7:
2a:9e:f6:8f:d4:a6:28:2d:d0:82:42:0e:dc:72:92:f6:98:0c:
86:69:bc:ce:cc:16:4a:0e:37:8f:ad:cc:85:c8:13:b6:68:e8:
aa:90:1d:fd:35:40:7c:8c:51:81:f2:13:c1:18:2e:af:10:e7:
eb:8b:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:26 2024 by rpki-client on console-fra.rpki-client.org