Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
File: N9J_wkRD_N1LG2XPyAeMShQon54.cer (raw, json)
Hash identifier: oUgjw5WBeqGx6jBOj96Wf0f4lONQO/A6ecLwoQfOlKc=
Subject key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BDB3FE47B8A0CC773236AB5334368
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216385
IP: 5.252.96.0/22
IP: 2a09:4640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:db:3f:e4:7b:8a:0c:c7:73:23:6a:b5:33:43:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:a2:62:4b:82:67:42:4c:ba:6a:47:6d:bd:
97:e8:ce:df:3b:c3:d2:c0:d5:18:8a:43:95:26:ab:
63:dc:87:4b:4f:dc:e8:55:6f:f5:98:5f:3c:32:30:
00:1e:fd:59:f6:35:16:0d:47:0e:8c:87:fe:96:44:
ca:54:95:7a:8b:9a:ae:c7:72:74:67:71:7a:33:f9:
28:c6:ae:ad:b4:65:62:a1:d4:63:8e:66:56:7b:98:
2f:c9:02:a6:72:0a:f0:13:85:19:f7:61:06:d3:9e:
5e:9a:cf:f1:da:6b:49:70:43:8c:8f:31:e0:64:72:
2c:5b:ff:91:5b:d9:84:a1:f7:19:1b:73:20:8a:92:
91:a8:46:52:18:28:66:3d:ff:21:d9:70:8e:f0:d4:
22:e1:33:75:1c:67:51:e7:ee:bd:79:51:4f:36:34:
84:9c:9d:ae:26:90:57:58:97:90:a6:5e:41:71:b0:
31:b2:9d:29:a3:38:b0:b1:72:69:c8:2c:27:fb:b4:
7c:50:89:b8:e5:75:c4:ee:b0:82:29:97:63:fd:b9:
45:f6:c1:09:ff:9a:b0:e5:72:68:62:07:93:30:8a:
2a:9d:f1:46:9f:b5:59:83:49:0a:1a:5b:ae:b0:11:
0e:a5:ab:5f:20:92:d6:b7:bb:3a:00:b9:d2:63:5b:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.96.0/22
IPv6:
2a09:4640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216385
Signature Algorithm: sha256WithRSAEncryption
9d:32:f9:87:a0:74:da:09:17:ea:d0:02:80:59:b3:a3:8a:e4:
d1:82:a4:cc:7b:b1:a8:b9:a0:94:8e:e8:32:d1:4c:4c:b7:dc:
33:a3:62:7b:67:43:b5:0f:49:10:e2:d7:ae:af:8f:41:78:0d:
cd:15:cb:2e:e5:9b:a6:75:59:9b:44:c5:34:f4:fe:f7:b8:38:
92:34:26:e7:6e:e3:5c:17:91:de:e7:1b:d5:94:da:84:bd:c5:
7d:46:23:58:e1:3f:8e:81:29:f2:a7:ee:83:3e:8b:ff:d1:30:
23:53:42:89:f8:de:da:07:98:a9:97:17:d5:71:71:bc:5f:06:
5d:9d:0b:c4:ec:a1:d2:f0:aa:0c:86:8c:e6:56:e0:f9:3b:70:
17:00:60:4c:80:08:e5:4b:9a:2c:85:70:61:ed:4b:5e:cb:59:
22:fe:f1:20:97:e8:cf:14:b5:f8:bf:df:b3:e5:df:29:38:0c:
38:fc:c3:6a:79:62:5c:e0:96:f0:97:10:11:dc:64:2f:92:e5:
c5:f1:d8:e8:8d:f3:70:de:fc:4a:8f:aa:21:8a:c5:96:25:fd:
cf:26:ac:40:6a:0e:6d:1c:50:f5:bc:31:82:b6:48:40:d8:26:
80:11:17:51:c5:f9:e5:53:0e:2f:b1:a0:9f:56:be:73:9f:d4:
b5:6f:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:18:20 2024 by rpki-client on console-fra.rpki-client.org