Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer (raw, json)
Hash identifier: yhsUQFOg0TPNS1fHlnLCXhmKIxSTepni2WJWhWEWTXw=
Subject key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444BC2F2C649B6EC42A5C5496793F5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15601
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bc:2f:2c:64:9b:6e:c4:2a:5c:54:96:79:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:c3:53:a6:75:29:78:96:95:35:c2:89:5a:
ff:ad:d4:dd:2b:bc:81:54:e9:1d:0c:49:8c:08:4c:
5f:51:b8:f1:34:39:af:ed:dd:52:65:12:80:61:c1:
58:66:30:9d:7c:a1:e2:c1:1f:c4:38:65:e2:56:c3:
7e:a0:07:72:50:5e:11:c3:69:00:60:2d:0a:8d:50:
f9:79:3a:81:e5:e9:a4:c2:c4:4f:37:d2:7e:39:52:
93:57:03:e1:ba:27:26:a8:50:1b:95:ad:2f:e7:8b:
87:ad:02:3c:ec:02:2b:20:1a:24:50:20:ff:97:fd:
eb:e3:d6:bc:f5:78:3f:6f:ae:07:f9:81:60:19:03:
16:cd:d6:d6:16:9a:b0:99:91:e0:3c:d8:e1:a0:ba:
5c:b7:3b:c5:00:15:4a:f6:d1:55:28:62:e1:d9:61:
a9:25:8f:bd:f1:f5:6b:7b:62:47:a5:cf:46:20:b3:
32:12:b4:7c:95:4e:bf:37:a7:dc:2a:c4:df:cc:60:
2d:53:6a:e4:b4:62:2f:e5:d8:b1:fb:ec:f1:63:34:
44:a5:40:76:a7:e0:07:42:e0:09:00:c2:80:e3:a0:
5a:0d:77:dd:8f:cb:ce:db:db:04:f7:b3:2b:92:ca:
44:4b:6f:3c:0b:31:ae:b3:02:38:0f:54:40:38:e6:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15601
Signature Algorithm: sha256WithRSAEncryption
62:d4:4c:5b:5e:48:60:09:8f:f2:8e:63:91:b8:ae:92:c1:98:
46:6e:e0:9a:7d:9d:37:dd:56:22:40:44:5f:ed:92:5a:16:5e:
28:bc:3e:d5:c7:ff:92:76:f6:bc:75:62:8c:51:ed:4a:d7:60:
a3:ff:5b:46:a0:8d:01:c9:42:b4:b8:5a:57:d9:ed:07:11:77:
9e:8e:0d:cf:ef:39:b0:c3:98:c7:82:20:05:c6:3d:61:dd:8c:
9d:0d:a5:1a:17:c7:63:3d:d0:0d:ea:d9:f1:30:4c:3d:3e:f0:
7f:27:a8:43:18:b9:4b:57:fa:44:b8:b8:be:af:20:51:46:5f:
2e:b2:47:79:13:5e:ce:d0:e0:e4:f3:12:bd:4f:b1:ad:57:e4:
c7:0f:b2:07:65:11:4b:4c:a7:78:90:c7:4e:be:ba:a7:df:75:
a5:10:09:7d:98:ca:d4:32:bd:c0:48:bf:b6:46:52:0c:20:d8:
6b:4e:8d:ec:b0:9a:fa:5e:40:11:a4:78:77:82:b8:67:f9:80:
5a:65:4f:75:f7:54:c2:8b:12:a7:c6:b3:6a:53:e0:c6:90:99:
6b:31:3f:7e:3a:c3:c0:7a:57:f4:76:62:ee:b0:70:6a:55:91:
17:09:34:80:fb:e7:0a:a8:fe:fe:1f:b3:d1:47:5a:40:90:32:
81:7e:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:32 2025 by rpki-client