Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer (raw, json)
Hash identifier: sCAXMDwPmJad5t1mwnstpBNJKmYA/plVcK0wgujqulQ=
Subject key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349461B7FD0F0FBDC4B56D71003BB64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12684
AS: 60725
AS: 201554
IP: 80.247.128.0/19
IP: 92.250.128.0/17
IP: 109.120.64.0/18
IP: 148.253.16.0/20
IP: 185.26.152.0/22
IP: 185.71.84.0/22
IP: 212.56.224.0/19
IP: 212.165.128.0/17
IP: 213.169.96.0/19
IP: 217.28.32.0/20
IP: 2a02::/32
IP: 2a04:38c0::/29
IP: 2a05:30c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:1b:7f:d0:f0:fb:dc:4b:56:d7:10:03:bb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a352e17af87ee2e5dc173d15543da63be55473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:ac:3f:67:82:b5:5d:6a:8b:bd:73:18:9c:
3e:06:63:12:06:ee:e2:2a:bc:71:f5:fb:25:b6:65:
68:a1:21:16:c4:41:b3:d6:e4:f4:e9:b4:f6:3c:4b:
f4:38:4f:e5:5d:22:b1:62:d7:67:a1:21:e6:7d:73:
f7:95:a0:af:82:8a:21:4f:17:36:12:d7:7b:9b:38:
3e:2f:d5:5e:38:bf:11:b9:5e:ff:8d:de:41:f1:ef:
80:dd:e0:8d:07:9d:f8:2b:ad:ac:76:86:2a:6a:7e:
62:29:1e:07:2c:a1:8f:23:80:02:a7:60:6e:fb:e3:
3d:17:34:7c:8d:eb:c1:bc:48:49:ec:7e:d5:83:80:
8b:25:2d:46:06:fb:9f:11:7b:91:d1:4f:c3:65:e0:
b6:a3:fc:5f:50:f5:c4:ec:a1:b1:0f:e5:18:0c:c1:
b2:bc:bc:51:b6:42:65:61:d9:b3:2c:7f:b8:6e:e9:
9e:07:9d:a3:61:b4:60:37:c6:4c:44:82:f5:5c:29:
15:97:eb:1c:29:1e:24:d9:d6:8e:49:3c:68:a4:5e:
74:38:41:4e:30:5a:75:70:41:fd:9f:26:5c:40:2c:
98:0c:50:86:09:40:eb:2a:f2:36:ea:6a:14:09:8f:
b1:62:b9:58:b0:83:c9:df:7b:17:30:3b:1d:65:5e:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.128.0/19
92.250.128.0/17
109.120.64.0/18
148.253.16.0/20
185.26.152.0/22
185.71.84.0/22
212.56.224.0/19
212.165.128.0/17
213.169.96.0/19
217.28.32.0/20
IPv6:
2a02::/32
2a04:38c0::/29
2a05:30c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12684
60725
201554
Signature Algorithm: sha256WithRSAEncryption
4c:69:18:22:33:2a:77:e6:cd:01:a4:92:e3:9c:f8:f0:66:52:
a8:26:2d:15:1d:2b:e6:c8:ba:ec:56:9f:08:e7:a5:e7:89:96:
9f:72:dd:f7:4f:25:a0:1f:bf:3e:83:2c:35:4a:12:0d:46:d2:
46:45:ce:89:8e:51:b2:71:d0:f0:68:bf:72:81:5f:ed:07:0c:
ea:92:0e:04:22:3d:44:39:68:06:bb:1c:f4:e2:3d:e9:f8:38:
12:79:55:50:9f:6e:98:b6:15:65:dd:31:13:ea:c8:0e:d2:de:
51:59:c3:e0:97:db:94:02:3f:82:8d:ec:d0:b8:74:d8:8e:01:
04:9d:ad:cb:a5:5e:4b:82:a6:d8:a3:9d:ff:51:24:9a:e4:f2:
32:87:18:01:93:dd:7f:9c:f9:6c:43:1f:96:be:ab:b3:3a:0b:
48:b6:2f:1f:20:2f:0d:fc:9c:69:31:12:4c:8b:89:1c:f5:69:
b4:11:76:f7:c4:9f:a1:97:b7:4f:ad:9d:c0:c1:35:49:26:8c:
ea:d3:91:d0:fb:58:d5:49:ec:f8:e3:1c:ba:1a:5b:df:eb:f1:
cf:3f:af:32:2c:0c:5d:75:e7:af:67:af:fa:b3:a9:13:89:18:
33:47:a2:6a:e3:2c:2a:25:47:00:df:02:2c:e6:99:f5:2b:52:
df:b0:16:f4
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAYzDSUYbf9Dw+9xLVtcQA7tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2EzNTJlMTdhZjg3ZWUyZTVkYzE3M2QxNTU0M2RhNjNiZTU1NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9usP2eCtV1qi71zGJw+BmMSBu7i
Krxx9fsltmVooSEWxEGz1uT06bT2PEv0OE/lXSKxYtdnoSHmfXP3laCvgoohTxc2
Etd7mzg+L9VeOL8RuV7/jd5B8e+A3eCNB534K62sdoYqan5iKR4HLKGPI4ACp2Bu
++M9FzR8jevBvEhJ7H7Vg4CLJS1GBvufEXuR0U/DZeC2o/xfUPXE7KGxD+UYDMGy
vLxRtkJlYdmzLH+4bumeB52jYbRgN8ZMRIL1XCkVl+scKR4k2daOSTxopF50OEFO
MFp1cEH9nyZcQCyYDFCGCUDrKvI26moUCY+xYrlYsIPJ33sXMDsdZV5HlwIDAQAB
o4IC/DCCAvgwHQYDVR0OBBYEFDejUuF6+H7i5dwXPRVUPaY75VRzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2E5Nzdl
YS00YTkzLTQ2MTgtYjdmZi0zNWIyMWJmZmFkNGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYTk3N2Vh
LTRhOTMtNDYxOC1iN2ZmLTM1YjIxYmZmYWQ0ZC8xL042TlM0WHI0ZnVMbDNCYzlG
VlE5cGp2bFZITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF
BwEHAQH/BGMwYTBCBAIAATA8AwQFUPeAAwQHXPqAAwQGbXhAAwQElP0QAwQCuRqY
AwQCuUdUAwQF1DjgAwQH1KWAAwQF1algAwQE2RwgMBsEAgACMBUDBQAqAgAAAwUD
KgQ4wAMFAyoFMMAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICMYwCAwDtNQIDAxNS
MA0GCSqGSIb3DQEBCwUAA4IBAQBMaRgiMyp35s0BpJLjnPjwZlKoJi0VHSvmyLrs
Vp8I56XniZafct33TyWgH78+gyw1ShINRtJGRc6JjlGycdDwaL9ygV/tBwzqkg4E
Ij1EOWgGuxz04j3p+DgSeVVQn26YthVl3TET6sgO0t5RWcPgl9uUAj+CjezQuHTY
jgEEna3LpV5LgqbYo53/USSa5PIyhxgBk91/nPlsQx+WvquzOgtIti8fIC8N/Jxp
MRJMi4kc9Wm0EXb3xJ+hl7dPrZ3AwTVJJozq05HQ+1jVSez44xy6Glvf6/HPP68y
LAxddeevZ6/6s6kTiRgzR6Jq4ywqJUcA3wIs5pn1K1LfsBb0
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:19:28 2024 by rpki-client on console-ams.rpki-client.org