Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
File: N8SLeJzH_-e-CURGQ_24a9tXP30.cer (raw, json)
Hash identifier: Q/1b3XLgEmkChNJ7xZxcHjZ7ON4bLSXPYMxFOtkAcN8=
Subject key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01929A583A55F670876A29E6C86BAF61ADDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Oct 2024 11:58:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202373
IP: 84.38.76.0/23
IP: 194.55.96.0/22
IP: 2a0c:cac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:58:3a:55:f6:70:87:6a:29:e6:c8:6b:af:61:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 17 11:58:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:e1:ff:d8:61:1f:5f:96:ff:a5:2b:c9:00:
50:2e:a4:16:eb:c0:1e:36:4e:66:01:f6:a9:18:cc:
12:52:91:1f:ae:fd:df:02:8f:0e:2f:2f:0f:5d:aa:
fb:38:23:34:79:30:23:bb:ae:d2:f5:f8:04:77:06:
7d:c1:a7:8e:e5:60:2f:26:72:b2:d0:50:97:51:c1:
60:36:8f:95:92:27:26:21:8c:fb:2d:e8:49:58:d9:
9b:4d:44:06:ac:c9:96:d0:de:a2:63:e2:1c:47:4d:
f9:b1:56:f9:77:93:eb:46:04:f9:f1:5a:29:3e:98:
53:f8:a0:e9:f0:03:73:8a:70:11:d2:2c:d8:da:51:
43:c9:13:6b:40:3b:6b:21:0b:6b:07:98:c5:92:b1:
56:92:59:d6:7f:b3:fe:a4:24:2e:3d:7e:50:2f:a9:
cb:5e:f3:f9:7a:93:df:46:9a:68:34:d1:18:a2:ef:
44:15:da:f8:ca:b4:c5:3f:07:33:d4:31:d6:bd:70:
fd:21:3e:e0:db:5d:cc:8c:e7:01:db:95:69:f6:00:
a5:14:6d:f4:f5:ea:ca:80:bf:27:82:05:50:16:cc:
11:b9:16:0b:63:72:ad:9a:dd:8c:36:a6:14:bd:4a:
a6:fa:37:2e:44:23:46:09:27:d4:57:7f:a9:fc:43:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.76.0/23
194.55.96.0/22
IPv6:
2a0c:cac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202373
Signature Algorithm: sha256WithRSAEncryption
32:45:b6:31:95:14:50:94:a2:1b:02:42:43:c4:5a:82:d4:64:
1d:d5:b7:bb:96:5c:33:3c:88:01:38:1c:ee:38:bb:2a:1b:5e:
17:bc:6d:bc:fd:fc:4e:8a:bd:7a:fa:33:49:c9:23:b9:f2:da:
c6:df:94:a0:d1:19:4b:a7:9a:97:b3:9c:ed:13:fb:3d:9f:06:
be:9d:b0:ab:f6:11:75:e4:bf:3b:f4:10:08:c0:56:c7:b3:2b:
60:ff:9a:58:56:08:4b:d0:f0:3c:be:30:b1:0c:89:48:08:bb:
2f:fa:14:db:0f:86:cb:13:7c:78:0a:ba:fb:cf:7b:74:a2:fa:
43:fc:98:89:46:12:9d:12:51:92:b8:6f:a7:72:fe:99:54:f3:
bf:41:4c:b4:38:54:ea:e4:28:da:1a:29:cd:65:f9:fc:b2:60:
80:17:a5:e6:a0:6a:40:53:a0:bf:e4:e9:af:f9:53:41:3e:15:
0e:44:7c:f5:85:95:7a:8b:9d:de:26:66:61:cb:d1:17:53:09:
8f:0c:d0:8b:c1:ff:a6:a5:79:64:4f:fc:59:7b:73:65:52:82:
0b:ee:5a:66:37:a2:70:44:cb:fd:37:cb:cf:5b:9c:f8:cb:5b:
29:54:cb:06:5c:f3:8a:89:ad:31:42:0c:e8:e0:45:50:a3:3f:
83:20:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:07:51 2024 by rpki-client on console-fra.rpki-client.org