Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.cer (raw, json)
Hash identifier: XJWIFdUUO1N9Z422c52cINsKsEzChIdveAzECCwqiYA=
Subject key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BEA5B61A3EF8CAE7D0DFF7AD7644
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.188.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:be:a5:b6:1a:3e:f8:ca:e7:d0:df:f7:ad:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:8c:88:dc:d5:9a:21:9b:36:7e:14:cc:51:
59:45:2f:5c:89:93:4c:a7:41:d4:df:c9:67:67:98:
08:d0:2d:ce:02:ac:e8:6a:47:a6:53:94:77:3a:25:
8b:f8:4a:14:7a:fb:4f:e9:fb:33:0d:0e:f4:31:52:
71:0b:3a:db:d6:29:15:59:a9:13:ac:f6:6c:00:ef:
e0:36:6c:37:f1:da:70:63:45:df:7a:57:89:b7:a6:
4c:9f:57:52:7e:2c:52:f4:d3:b2:75:35:26:8b:25:
80:33:6e:15:4c:f1:e9:7f:e8:b1:05:6b:ed:0d:df:
be:8e:9e:3f:54:4c:e5:36:d9:c1:80:a7:71:34:63:
a0:5a:8e:cd:12:6e:67:d5:43:de:43:13:ed:4a:a8:
8a:0c:24:7f:7b:c5:66:14:71:38:1b:b9:c0:2d:7d:
1e:21:49:24:87:9d:87:af:28:6b:35:4d:59:6a:26:
c1:bd:6c:1a:d0:2f:84:64:54:cd:a1:01:c0:ed:10:
76:0a:b4:95:56:3d:ab:b3:13:5b:16:11:ba:d5:15:
8d:42:25:a3:a3:43:16:ed:68:7b:6e:47:da:49:7e:
16:94:38:a3:72:7d:4f:84:9b:99:92:a7:c9:ab:ed:
9c:52:c2:3d:79:81:93:be:d0:21:8d:2e:c4:14:3d:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e3:13:1e:d0:e5:27:7f:7c:bc:a5:9a:8c:5f:b2:3f:d3:df:
b0:9d:28:86:21:eb:68:40:ec:c1:f1:32:87:40:89:85:dc:63:
46:e6:81:87:57:d2:e9:34:51:c2:f3:a5:1e:cd:84:64:a4:04:
c0:7e:fd:d9:a5:94:57:b2:15:00:95:ac:94:c3:3e:68:1c:ae:
62:b3:a4:2d:9d:63:c2:a5:ee:15:7d:23:d3:bf:2d:2d:2c:aa:
1a:13:87:e8:85:f4:d8:7e:88:79:81:59:94:7e:e6:19:ae:77:
d7:d2:08:87:a5:1d:04:2b:6f:7a:a5:2c:7f:9c:e4:46:85:6f:
bb:10:6e:d3:17:59:04:e5:ab:22:d2:86:28:e2:a6:b1:ce:3b:
24:73:08:0c:9e:69:44:9f:09:d8:f9:50:86:b0:66:82:38:69:
68:79:dd:29:b8:57:1e:b2:c8:65:c6:ab:1d:6c:da:9b:17:7f:
57:fe:0e:35:f9:9d:37:5a:1b:c9:6c:7b:5a:aa:e1:d4:de:b6:
8f:76:f8:8a:87:93:84:47:78:84:e2:bd:5f:00:b7:cb:91:1b:
4e:a7:3b:31:9c:1a:d0:02:2e:9e:80:3f:ce:d0:2a:6b:21:f8:
d5:1a:fe:82:f6:a9:cb:79:bd:78:e7:47:ea:b7:2e:b3:ed:aa:
5e:33:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:00 2024 by rpki-client on console-ams.rpki-client.org