Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.cer (raw, json)
Hash identifier: 5B+PBZAqTTqafp244/JUWw66nJkRnC+yLy1QTmdWNAM=
Subject key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF935C89DD3AE30B11A574A296D94A447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 15:48:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24763
AS: 29104
IP: 37.35.0.0/21
IP: 185.116.132.0/22
IP: 192.54.144.0/24
IP: 192.93.158.0 -- 192.93.161.255
IP: 192.93.166.0/23
IP: 193.56.124.0/23
IP: 193.56.130.0/23
IP: 2a00:4f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:35:c8:9d:d3:ae:30:b1:1a:57:4a:29:6d:94:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 15:48:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:1c:0d:c7:79:30:87:44:52:03:8d:74:e7:
e3:e5:a0:bf:22:36:26:a5:55:45:8a:a1:88:5f:82:
89:b6:38:0f:ac:4c:22:d2:5a:be:cd:80:16:c8:75:
d3:b9:f0:8e:d7:a8:72:40:fc:32:1d:da:f6:a6:c6:
4a:32:6e:9c:43:20:32:6b:2d:fc:bc:2d:f5:a2:c7:
76:88:9e:d4:3d:25:b0:b0:8b:b7:16:87:44:0d:e6:
14:16:ac:8f:60:fd:d8:d6:4b:09:17:a9:3a:5f:a8:
44:71:91:96:cc:86:00:dc:5b:c5:b2:cc:ea:a5:85:
7a:fe:af:9b:88:ce:d3:90:e6:30:f6:c8:38:69:65:
97:a0:c4:ea:ac:de:38:ee:77:e3:fe:cc:6e:8b:f0:
1d:dd:39:e2:d3:2f:7f:b9:58:60:d5:3f:bb:64:78:
b8:1f:de:c0:9e:cc:75:30:49:34:53:56:6d:72:cd:
9b:1d:67:63:42:51:b2:7e:b8:3a:38:6b:55:26:7c:
02:7b:15:8c:07:f1:c7:7c:32:ca:6f:61:3c:99:45:
b4:8c:dd:15:fe:1d:e2:6e:d6:f2:a9:40:e7:10:44:
5e:8b:34:9a:58:a3:0c:5d:cf:4c:e2:0f:95:ee:59:
4d:25:8b:d3:95:f9:96:1c:13:bd:63:45:8a:68:ff:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
192.93.158.0-192.93.161.255
192.93.166.0/23
193.56.124.0/23
193.56.130.0/23
IPv6:
2a00:4f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24763
29104
Signature Algorithm: sha256WithRSAEncryption
60:df:af:f0:b8:59:c5:08:78:29:49:ab:c5:83:37:05:ac:a1:
22:8e:29:08:61:b1:7a:6d:d8:1e:c3:56:23:ee:28:24:46:0c:
06:5b:1a:d2:bb:89:16:e8:5c:53:f5:5f:ef:03:b3:5e:61:2b:
46:ca:c7:e3:a6:cb:3f:cb:31:ee:34:fb:b3:25:97:8f:5e:4c:
af:44:bb:09:6d:e2:b2:34:86:d4:18:28:b5:c2:ad:d9:f9:48:
16:3c:0b:27:29:3c:87:87:80:5f:80:7d:8c:88:1f:95:14:10:
0e:ed:f4:a3:0a:6e:73:66:5d:d3:5f:a2:3d:51:f1:d5:b6:b2:
7f:69:e1:db:cb:39:2d:d7:ac:2c:e6:9e:54:e4:44:9e:f9:f2:
c0:79:2e:16:3b:34:95:33:41:43:1f:68:39:77:97:e7:c2:21:
d2:69:80:c5:18:a0:fa:e7:19:31:de:00:52:f1:dd:02:7c:7a:
63:2a:2e:8e:3d:22:8f:53:96:13:65:d5:06:20:06:a2:93:2a:
9a:91:36:20:82:ed:92:d0:37:a1:49:7b:94:f3:86:c3:3e:c9:
a4:08:eb:19:47:a3:34:7b:1a:b1:8b:c2:fe:90:3f:36:d4:f2:
59:07:84:24:bb:7d:70:f9:e8:7b:da:99:1b:7f:ac:25:08:e4:
2f:d2:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:25 2024 by rpki-client on console-fra.rpki-client.org