Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer (raw, json)
Hash identifier: CpI7TnJR+zMYw48VkNAhSkU++IwjC113QTGa7mteRMo=
Subject key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD19202DF0F18778CA2182CB4DA8BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.243.88.0/22
IP: 83.143.104.0/22
IP: 146.19.90.0/24
IP: 178.20.212.0/22
IP: 185.101.20.0/22
IP: 185.239.136.0/22
IP: 185.240.92.0/22
IP: 194.26.129.0/24
IP: 194.104.128.0/24
IP: 2a05:f680::/29
IP: 2a07:e240::/29
IP: 2a0c:5980::/29
IP: 2a0c:7980::/29
IP: 2a0c:8240::/29
IP: 2a0c:da80::/29
IP: 2a0d:1840::/29
IP: 2a12:6d00::/29
IP: 2a12:7c80::/29
IP: 2a12:b080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:19:20:2d:f0:f1:87:78:ca:21:82:cb:4d:a8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:c0:bf:3b:8f:7f:17:e5:e9:3e:4a:df:66:
9c:3d:c3:1e:55:17:db:75:ca:af:36:9a:48:22:a3:
d0:f5:31:32:f7:c5:db:b7:c7:24:fc:a9:00:a3:a8:
8a:cc:47:2e:29:a8:1f:62:42:80:54:e9:3f:da:ee:
13:7a:48:f5:6e:f6:22:d9:17:94:e6:75:d1:d6:ca:
11:fb:33:37:4c:96:0f:23:b8:d2:59:df:4d:2a:66:
00:54:cd:5a:c0:a6:ee:10:0e:76:9a:ac:c6:50:36:
41:67:48:ac:b0:d4:cd:f1:50:c2:e2:6d:19:09:cc:
83:0b:a7:02:ed:0f:0c:e5:83:ed:fb:64:df:5c:02:
bc:a0:d8:b9:bb:33:02:4a:b5:24:50:32:03:95:c0:
6d:e3:1b:65:cb:f5:14:d8:99:62:36:ab:46:64:c0:
9b:b6:ca:f1:fa:60:45:3b:6b:9a:91:e7:b0:9b:ca:
a4:61:41:27:52:72:87:7c:78:51:eb:92:92:6b:07:
83:a7:b6:f1:c6:50:e1:ac:a7:8e:fb:18:49:93:33:
7b:c0:2a:42:44:97:19:c2:2f:1e:f7:72:c2:d6:52:
14:28:76:65:c7:93:b2:3b:9c:e5:c4:18:48:a6:b7:
3f:8a:c5:08:81:66:89:42:4f:2b:b6:0a:3e:7b:99:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
83.143.104.0/22
146.19.90.0/24
178.20.212.0/22
185.101.20.0/22
185.239.136.0/22
185.240.92.0/22
194.26.129.0/24
194.104.128.0/24
IPv6:
2a05:f680::/29
2a07:e240::/29
2a0c:5980::/29
2a0c:7980::/29
2a0c:8240::/29
2a0c:da80::/29
2a0d:1840::/29
2a12:6d00::/29
2a12:7c80::/29
2a12:b080::/29
Signature Algorithm: sha256WithRSAEncryption
4c:eb:5d:d2:0d:8a:12:70:8f:20:90:76:54:fd:51:b0:9c:27:
5c:53:88:7f:02:5f:f9:59:c1:a9:02:fc:52:61:ad:5a:50:23:
2a:1c:4c:02:fc:58:22:30:62:ca:e3:3f:4a:c0:72:36:3c:ae:
6a:8b:82:ea:07:c3:7f:4b:f4:35:c2:2f:f2:9d:a4:4d:88:ab:
70:00:41:88:c5:4e:ba:a1:46:09:1a:67:0b:fb:bd:af:13:8f:
86:15:df:77:d7:e6:b9:8e:bc:bc:3c:94:42:f3:a0:4d:f5:30:
1d:36:2a:18:a1:88:75:36:f9:33:bc:77:40:30:70:06:5a:8e:
12:83:f9:dc:6b:18:f4:8a:a5:f1:0c:0a:84:a5:33:0f:71:c9:
3c:1f:16:81:dc:71:a9:43:4b:f1:8e:ce:f0:5c:f6:52:43:11:
b5:7b:bb:97:d8:c0:b9:d1:05:11:ee:70:40:8b:c7:5d:c1:08:
44:ef:64:b1:18:20:10:a3:07:8a:bb:03:8b:5c:df:73:37:09:
f9:33:cb:11:f8:56:87:c4:1c:02:cf:70:87:03:2f:af:af:fb:
1c:22:29:16:e3:00:b6:ac:69:34:d7:6e:54:ed:c3:72:0c:e5:
2a:75:1e:7d:3a:65:35:6a:2b:8f:15:1f:71:80:d6:97:26:86:
04:ee:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:10:55 2024 by rpki-client on console-fra.rpki-client.org