Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
File: jxLb_EZr00gJDtwa4yklIunXO9k.cer (raw, json)
Hash identifier: Wujgr2qSSGqbff2zR2cgWYBLGbDvbzAwFRaY3bqjsyg=
Subject key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB0A844FA5732C2FF2D6F8463F12C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.16.218.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0a:84:4f:a5:73:2c:2f:f2:d6:f8:46:3f:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:01:9f:12:09:06:0e:43:4b:fd:01:6c:19:
fc:df:86:fc:94:4c:98:a6:a9:c6:b9:4d:74:8b:77:
80:c7:c0:0f:e6:40:b1:40:e2:c9:04:ac:04:97:7a:
ad:44:1f:75:65:71:17:d2:9a:e9:3b:95:9f:7a:5d:
bf:2f:95:7a:85:32:b0:0e:fb:ae:6f:d4:b7:02:b2:
a1:6e:93:5e:ac:5f:0b:a2:93:64:98:cc:59:7f:42:
60:e3:cb:95:fd:92:96:ea:c6:ef:47:e4:fe:63:b7:
1b:26:1f:1c:42:fc:d5:50:f9:2d:29:2a:55:62:a6:
19:88:f8:e4:a1:52:4d:91:00:de:de:0f:d5:61:95:
45:61:c7:ac:6d:a2:e3:83:03:96:5f:7b:aa:bf:35:
1f:4c:e5:da:6e:fe:3f:c3:e4:50:3b:eb:83:ca:ab:
21:ba:3c:01:db:e3:1a:b9:fe:60:29:52:65:02:79:
ab:09:af:4d:97:f3:9a:f4:a8:29:f3:ff:af:34:22:
9f:a3:f9:2d:2d:31:ba:3a:29:92:de:84:d5:b6:53:
70:82:f1:47:72:2f:86:b7:2c:91:2a:05:f8:ee:6a:
0c:48:7e:42:5c:4a:09:83:1f:b7:3c:43:36:64:e5:
5a:b8:da:c9:09:f9:6a:4c:07:2c:b5:a1:93:34:d7:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
56:50:11:25:7e:13:66:26:f4:2a:c4:f6:10:31:1a:99:52:80:
32:77:b3:ad:60:95:2f:3b:68:b0:4a:26:4b:71:45:3f:4a:38:
c5:d0:5d:c6:04:53:7d:84:d0:76:39:56:04:3c:e5:9d:44:94:
46:b8:1d:81:5c:fe:4c:42:e9:ac:63:32:fc:5c:ce:d1:bb:7d:
b3:e3:8f:4d:48:08:63:57:63:0a:5d:b1:60:61:84:58:f3:f2:
c2:f6:7f:fc:94:66:5b:de:14:11:13:b9:a5:74:bc:1d:65:c3:
48:18:88:f6:19:b4:79:05:d9:ac:bf:06:3a:13:fd:3e:71:5c:
65:cf:8c:2d:57:c3:72:36:f4:89:12:d9:de:67:21:bc:3f:4b:
66:9a:07:7b:bc:22:a7:c6:6e:a0:2f:1c:cd:b1:c0:81:62:2e:
66:65:a4:bf:72:92:34:51:e3:d0:53:99:28:20:21:1d:da:86:
30:d5:80:1d:d3:b5:e2:f6:b6:a2:be:c1:85:61:b5:8c:38:1f:
68:9f:37:b3:5a:b6:87:65:7e:a5:20:df:f7:29:bc:c3:ec:e4:
18:52:49:81:7b:08:7d:69:2f:a6:97:1e:31:55:88:0b:45:a9:
ed:f5:a2:43:99:75:54:79:f9:0f:19:cb:c0:01:0e:a2:76:a3:
7d:45:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:38:34 2024 by rpki-client on console-fra.rpki-client.org