Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer (raw, json)
Hash identifier: fMUkUUs8l4H/NWsjaV22Fid+Xh0hYiomN/gKrH1Iv94=
Subject key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DC270BF0D28AD5025A3E08C810862884
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 13:37:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208653
IP: 5.183.136.0/22
IP: 2a0e:dc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:27:0b:f0:d2:8a:d5:02:5a:3e:08:c8:10:86:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 13:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:5f:ea:1e:a9:cf:60:01:3e:72:92:5a:9a:
9e:b7:3a:39:ed:99:69:36:74:c8:91:10:0e:b2:10:
f4:d9:40:78:f4:b6:69:f2:ba:64:90:c9:cf:e7:80:
a6:88:8e:ab:53:f2:11:b2:59:33:5e:e4:dc:79:95:
06:52:d6:0c:1e:70:b6:09:0e:8f:74:c5:b1:58:2e:
6b:01:25:8b:dc:6a:16:4a:f7:34:df:87:4d:7f:d6:
bc:8f:db:78:8b:0c:71:18:26:0a:1f:3e:a8:ab:20:
b9:76:8d:7f:4f:36:98:90:ba:e5:34:29:d6:36:3c:
45:94:81:d6:91:a2:0f:3c:63:c5:0e:50:9e:94:d3:
dd:f7:02:d7:1e:4d:02:f3:58:cd:35:93:d4:7f:31:
ec:ec:c5:3d:97:cb:c6:34:64:51:31:af:01:2e:aa:
8b:40:f8:a1:b9:c8:96:cb:1c:45:86:c9:9e:8e:ba:
86:d6:ed:32:be:24:be:fe:c7:28:fa:24:c8:d1:37:
e6:e6:b6:f8:a7:2c:87:29:d5:83:97:e1:05:1e:06:
a5:1f:d0:1a:0c:3e:3e:9c:63:76:10:fe:d2:6d:73:
00:74:31:3c:71:73:d5:9d:bb:7c:6c:10:50:62:68:
4a:8c:18:0f:4b:5d:ce:d9:5f:11:f4:ad:ed:ed:72:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.136.0/22
IPv6:
2a0e:dc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208653
Signature Algorithm: sha256WithRSAEncryption
89:8d:c5:c1:c7:5e:96:f4:25:ab:79:94:8d:6b:9e:c2:ed:31:
92:c8:8f:0f:65:a4:94:b3:f4:7e:2f:7d:c1:ac:8b:b8:3f:97:
2f:28:af:d2:e9:be:2d:62:03:fe:96:a9:6e:ce:07:59:f1:00:
1d:f2:5c:53:92:cd:3a:65:5d:c6:ef:f2:82:8a:1c:96:2f:30:
da:69:d0:a2:5e:72:22:98:6d:6a:6e:cd:6a:f8:35:71:3c:97:
77:76:bf:55:d7:c0:41:8d:4c:80:5e:c8:cd:b5:9a:f0:60:4c:
18:18:e3:78:d7:1e:1e:6a:0b:d0:46:f4:13:6e:af:24:84:ce:
93:c9:f9:93:db:06:56:e1:79:81:03:ad:21:e7:f0:8f:46:de:
5d:9e:50:b5:1e:b5:a9:7a:ff:2f:ee:0a:9d:32:b2:f3:db:69:
6b:28:a4:47:5d:f7:28:03:b8:0d:54:0a:89:0f:99:d9:51:a3:
ad:4f:e4:19:79:59:06:b1:2b:f0:4b:c4:f2:84:68:98:68:46:
e6:b6:4e:20:31:af:e8:f1:e0:76:1d:c8:b2:f2:37:44:27:0e:
12:16:3e:12:9a:ec:b7:ef:02:ec:7b:f8:19:c0:26:2b:69:cd:
c6:d4:d6:ed:2c:2b:52:8a:ec:88:37:d8:e8:27:9f:d9:4c:b2:
ee:61:9e:dd
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZHcJwvw0orVAlo+CMgQhiiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTEwMTMzNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQ2ZGRlZTM0YzViYjhlYzBlYjkxOWNlMjY1NmJmMGNkODU1ZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqopf6h6pz2ABPnKSWpqetzo57Zlp
NnTIkRAOshD02UB49LZp8rpkkMnP54CmiI6rU/IRslkzXuTceZUGUtYMHnC2CQ6P
dMWxWC5rASWL3GoWSvc034dNf9a8j9t4iwxxGCYKHz6oqyC5do1/TzaYkLrlNCnW
NjxFlIHWkaIPPGPFDlCelNPd9wLXHk0C81jNNZPUfzHs7MU9l8vGNGRRMa8BLqqL
QPihuciWyxxFhsmejrqG1u0yviS+/sco+iTI0Tfm5rb4pyyHKdWDl+EFHgalH9Aa
DD4+nGN2EP7SbXMAdDE8cXPVnbt8bBBQYmhKjBgPS13O2V8R9K3t7XKLRQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPjW3e40xbuOwOuRnOJla/DNhV1UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2Lzc4M2Rh
NS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFkMmMvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1
LTY1NzItNDEzZC05ZDZiLTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdj
NG1WcjhNMkZYVlEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEAgW3iDANBAIAAjAHAwUDKg7cADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDLw0wDQYJKoZIhvcNAQELBQADggEBAImNxcHHXpb0
Jat5lI1rnsLtMZLIjw9lpJSz9H4vfcGsi7g/ly8or9Lpvi1iA/6WqW7OB1nxAB3y
XFOSzTplXcbv8oKKHJYvMNpp0KJeciKYbWpuzWr4NXE8l3d2v1XXwEGNTIBeyM21
mvBgTBgY43jXHh5qC9BG9BNurySEzpPJ+ZPbBlbheYEDrSHn8I9G3l2eULUetal6
/y/uCp0ysvPbaWsopEdd9ygDuA1UCokPmdlRo61P5Bl5WQaxK/BLxPKEaJhoRua2
TiAxr+jx4HYdyLLyN0QnDhIWPhKa7LfvAux7+BnAJitpzcbU1u0sK1KK7Ig32Ogn
n9lMsu5hnt0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:14:10 2024 by rpki-client on console-ams.rpki-client.org