Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
File: n-j2j9gocE6NcHlseDMn3N6bDI4.cer (raw, json)
Hash identifier: Mf57iKldYNF1siL3C67KBNh3Z/ZX0oAnIXAcZRPVBqI=
Subject key identifier: 9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AA9BD2FD4404BD79E33BCC6A45AE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205705
IP: 46.229.250.0/24
IP: 2a01:82c0::/32
IP: 2a0b:b540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a9:bd:2f:d4:40:4b:d7:9e:33:bc:c6:a4:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:48:e9:e6:70:37:b8:3b:91:39:9e:a4:de:
f1:72:29:06:93:b0:27:83:41:be:70:73:61:d0:5e:
0a:c2:c9:41:0d:b9:cf:96:90:88:2f:cb:2e:9d:fb:
9c:4b:53:c7:3e:15:10:72:67:4a:d5:8b:4c:2a:4b:
e8:be:18:ca:09:b9:38:10:95:7e:39:09:7e:ea:20:
95:84:f7:64:43:ca:1d:60:a0:e5:85:48:11:d4:53:
3d:7d:2b:0a:d1:73:43:b4:87:1f:0a:86:83:be:5b:
40:85:28:82:59:f8:3b:b9:c7:74:6b:1a:13:90:cd:
94:9a:38:af:16:41:42:b4:8a:8a:d7:fb:5f:da:d7:
17:8e:0a:68:c7:d0:7b:91:63:d8:ed:45:7f:f3:bc:
a6:9e:29:15:ad:6d:8e:17:cd:a4:58:01:d2:2d:44:
0c:2b:c0:00:e1:8b:26:ce:2a:cb:34:12:81:8a:55:
f4:95:0a:47:78:54:ec:9d:78:5e:f0:8d:60:d4:26:
cc:45:a0:d1:a6:e3:04:b2:97:27:40:c6:cb:33:2a:
a9:34:76:96:52:28:b8:2d:0f:64:62:3c:d5:47:59:
4a:5e:32:3a:0f:e6:17:29:16:b2:bb:8a:a7:9e:1e:
71:61:7b:1e:91:e7:1c:2f:8c:b4:37:fe:fa:b3:45:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.250.0/24
IPv6:
2a01:82c0::/32
2a0b:b540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205705
Signature Algorithm: sha256WithRSAEncryption
00:95:f1:38:79:80:b5:1e:f8:05:8a:f7:3f:e8:e3:6c:e3:ea:
73:e7:d3:d2:24:84:b7:a5:61:db:f5:0c:58:2b:02:e2:e5:da:
07:66:5d:94:0a:65:e7:5d:4d:ad:17:c4:27:8a:67:3c:23:14:
8c:d3:a9:18:66:c9:c4:10:93:4d:b3:a2:69:47:d6:f8:3a:cd:
6c:54:e7:83:96:4b:7b:51:1d:4b:80:d8:1b:cb:c5:a3:a7:9a:
46:c0:e0:e9:1e:29:47:67:2d:81:1b:9e:ec:99:9c:b7:e0:53:
ad:b1:7f:c0:88:86:65:b8:8f:2c:d0:92:9d:d1:9e:8a:ff:6c:
72:92:2d:ef:aa:1c:91:79:0f:4d:fd:86:62:52:e3:d2:f0:56:
a6:75:02:19:ba:98:2b:4d:55:8a:de:50:cb:74:38:b2:89:c1:
e3:f2:23:95:92:40:fb:8b:fe:b0:91:7d:65:35:83:35:ae:bc:
a2:de:73:36:c5:9a:65:55:ff:bc:45:c0:fa:c5:3a:e6:44:4b:
5b:00:e3:2a:53:aa:08:3e:c1:c1:88:5e:c2:64:4c:88:03:f8:
ea:a2:a4:0e:9b:79:c1:5e:df:c8:d8:79:f8:0a:7d:30:5b:bb:
70:4d:65:13:5f:41:42:30:24:3f:b6:31:84:14:f9:28:09:86:
d8:01:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:46 2024 by rpki-client on console-ams.rpki-client.org