Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer (raw, json)
Hash identifier: tcsdwoFrWJNfq0dmfVd2gPoJaUfxN8pFLAKd6LAs2nw=
Subject key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EFDFBFEEB737E82D19E9A7FFE0B41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51759
IP: 46.36.96.0/20
IP: 2a02:d380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fd:fb:fe:eb:73:7e:82:d1:9e:9a:7f:fe:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:e5:5d:22:48:d8:c2:91:74:e7:d0:59:a6:
58:e9:73:c4:ad:b8:05:1c:7d:74:6c:ef:2f:6a:ce:
65:ba:d4:14:54:76:09:fe:1b:7b:6d:76:26:b9:db:
c6:1a:de:90:1b:8d:4a:35:88:0d:c7:f9:9f:73:05:
c1:5f:b2:7c:ab:26:b1:53:42:b5:6b:e9:8c:50:9b:
02:b9:0c:34:de:c0:ad:86:34:c6:6b:cc:f5:96:cc:
3f:a9:c9:fa:9b:26:35:a9:73:54:b9:57:1c:31:81:
b3:2d:9b:5b:61:f3:33:39:ca:ab:21:3c:50:da:a7:
2c:dd:89:60:72:b6:7f:69:7d:04:84:5c:9d:1f:ca:
dd:c4:39:84:1c:5a:a8:fb:5f:4e:a4:11:0e:88:fa:
2a:53:5c:96:bc:36:dc:8e:89:01:e5:e4:28:ee:ae:
91:1b:4d:b5:3b:e9:eb:40:0b:35:90:7f:0d:b5:75:
37:5d:9b:47:60:42:47:53:8a:45:96:fe:f2:95:5c:
ea:1e:b2:6a:fe:70:7d:76:b1:19:90:58:fe:35:0e:
a9:f1:b8:6e:2d:47:16:3d:0d:59:5d:5b:d0:83:49:
f5:ad:8b:dd:9b:29:2b:f0:f9:f4:1b:02:cf:ad:92:
4b:64:c1:0c:bb:dc:26:80:8c:71:0e:5e:ea:6c:48:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/20
IPv6:
2a02:d380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51759
Signature Algorithm: sha256WithRSAEncryption
15:a9:35:02:e8:1b:28:95:e0:bc:1c:4a:4a:9b:05:8f:21:76:
54:e7:20:b9:04:85:0f:12:e6:07:94:7c:bc:d1:54:e0:8d:6b:
fc:7a:cf:58:e2:55:19:72:96:52:40:ae:02:ae:a1:a2:0c:05:
2e:05:4c:49:21:2f:50:8a:ff:c0:62:dc:71:29:b6:fd:a9:94:
0f:5f:e5:fa:e5:4d:73:b1:97:2a:4a:3e:da:ed:fc:38:1f:dc:
22:d3:ee:56:3f:72:2a:f3:02:51:b2:46:43:5e:1b:0f:a1:8f:
57:e1:d9:75:4e:48:70:fc:80:3d:e1:80:c2:5a:20:8a:c8:a9:
7a:ff:4c:c7:41:5f:f8:26:4c:59:ad:d2:9f:9c:46:75:5a:d6:
b7:d5:d6:6d:b1:e1:e2:28:cf:c7:11:47:91:99:41:58:bb:82:
26:f9:92:0e:cd:46:ea:52:53:9c:91:ae:0b:5a:4d:4d:c1:01:
ba:e8:b7:ac:90:82:23:0a:82:5e:23:a5:bc:11:cd:0f:11:c3:
ee:10:0c:f4:26:7a:38:8d:7e:67:a7:47:e3:4f:83:d4:54:c2:
ef:df:cf:59:5e:d8:6d:c7:e1:23:6a:73:57:7e:f0:08:b2:a2:
ad:63:a4:4f:2d:ae:3a:cb:c2:59:94:dc:ce:2b:c6:a7:ec:69:
63:a4:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:46:39 2024 by rpki-client on console-fra.rpki-client.org