Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.cer (raw, json)
Hash identifier: Dnqlf7r8KG/j7bsM4veAPFavuBVJtSBRYJE2OiAyLkw=
Subject key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BAB46C9B9F1116637905115360251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.116.32.0/22
IP: 2a06:7b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ab:46:c9:b9:f1:11:66:37:90:51:15:36:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:3e:98:db:13:3d:fd:74:8c:38:8e:69:eb:
db:d1:9f:98:bd:50:50:d5:34:64:24:cc:4e:b6:f4:
09:75:f8:6b:85:0f:fc:c6:40:f6:b1:74:3b:6f:73:
4e:88:3f:ab:07:33:e2:59:92:17:a5:d1:7b:72:e7:
1f:fa:df:34:e3:aa:e4:b5:4b:7e:91:5f:a9:89:89:
da:d7:7a:5a:46:92:d0:ef:c3:69:f6:b6:d7:79:a8:
81:34:ec:be:14:3c:43:77:bf:12:f4:6a:de:86:fd:
c2:79:30:b1:b8:8a:2e:9d:1e:62:c9:ec:d0:ce:1c:
55:0e:9c:c6:81:e3:ac:f5:4b:cf:36:8c:2b:b6:8a:
7c:0b:b4:97:93:41:b8:3e:cc:ec:f7:46:ce:a1:84:
38:a1:21:96:36:ea:cd:37:06:29:01:f8:de:f3:d7:
5e:7a:71:4e:24:3f:20:ed:32:99:8a:14:86:b0:0e:
20:b7:c3:34:f4:c2:d0:07:07:9d:da:f4:c3:e8:4b:
34:a1:19:e9:42:fd:e0:00:3d:4d:36:90:96:62:c5:
82:8f:52:f0:f2:57:ef:2d:95:23:81:5e:5c:a6:2e:
24:68:3b:8e:c0:cc:f3:85:4c:16:bb:7a:ef:a1:9b:
d9:81:62:1f:1d:14:07:17:b9:60:d4:4f:8e:86:2a:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.32.0/22
IPv6:
2a06:7b40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:50:c2:c2:b6:15:01:47:23:92:66:e2:7b:f4:a5:1a:4f:e3:
71:29:36:dd:c4:78:79:f2:16:d2:50:b0:a0:e5:b7:12:72:97:
ce:8f:7d:fc:73:0b:08:8f:98:12:00:8a:4f:2c:28:83:05:dd:
79:7c:42:3c:9d:9f:4e:09:86:bc:7f:03:99:33:a6:d4:00:30:
6f:ca:d5:3b:a8:d3:67:97:77:8f:56:9a:93:75:00:99:ad:39:
d7:27:dd:ff:16:14:ef:56:5a:71:8f:86:4e:c0:af:31:7d:ef:
bd:8c:38:d4:b1:18:32:22:22:08:e9:3e:82:b3:38:1d:dc:96:
8f:b8:1f:47:19:be:71:22:54:2d:d9:80:f0:6f:24:b8:8b:d6:
9c:61:29:d7:b2:61:cd:ab:08:8d:dc:27:ac:08:05:7f:a9:31:
b9:eb:de:2f:d3:24:a1:98:b3:b9:10:28:12:59:f8:e2:43:02:
2e:8c:fc:ac:2d:b3:bc:d6:3a:5b:56:df:f4:73:b6:64:d5:21:
80:9d:48:40:f7:0b:6b:0f:d3:91:3a:b0:a1:83:76:65:45:3c:
83:4e:9b:2d:3a:53:71:55:f8:21:ff:4a:2a:a3:fb:24:ab:e9:
97:01:94:b5:10:f4:bc:12:c0:a1:41:a7:39:5b:c0:8e:4f:6e:
4a:f9:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:13:46 2024 by rpki-client on console-fra.rpki-client.org