Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
File: NBSgbayFTb7mCYRYjex7MoS1qlA.cer (raw, json)
Hash identifier: zdvZh7MlGfVRWt3LjZj2uw0LCo+H12FsdIn1Xo1a6zY=
Subject key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349132CA9466377D36D51D8A1B3DEC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.104.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:13:2c:a9:46:63:77:d3:6d:51:d8:a1:b3:de:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:76:03:76:78:c6:a5:46:af:ee:15:23:03:
59:03:b3:ad:19:77:eb:66:4a:56:b9:f9:a4:2e:3a:
96:a1:82:e3:62:67:76:ca:e1:7d:1d:32:4b:30:d3:
29:49:83:c8:aa:9a:27:df:5e:7c:c1:2d:17:01:5c:
83:27:f1:1e:ab:55:67:2d:15:8d:ed:7e:b0:d7:ba:
12:2d:e9:67:d7:5a:58:0b:35:e0:45:1f:ac:51:a5:
d7:a2:7b:a9:82:dc:89:95:53:c4:8c:4a:78:87:2c:
f7:e8:d6:7d:ca:25:2e:9d:26:08:be:14:60:26:2f:
9b:0c:1c:8a:9e:d0:a2:bf:66:57:42:f3:58:50:94:
1b:a4:18:79:86:fa:98:7d:1a:dc:1a:a0:41:f3:c5:
3c:bd:a9:44:99:16:df:66:10:9c:b9:72:cd:15:3e:
b2:77:99:d3:0f:e7:75:f8:cf:f6:76:d5:0a:12:2c:
c9:dc:1e:9b:f7:7a:95:60:79:6e:a2:f3:c8:40:41:
22:66:4f:15:b5:34:a4:d2:a1:f2:9f:13:c4:9d:54:
7f:05:8a:57:0b:fa:ee:6a:4d:34:5d:e7:73:52:61:
88:eb:1e:4f:d6:c9:44:0c:8a:1c:40:90:14:fe:5c:
75:d5:77:d6:da:6a:f1:f1:9b:13:a1:2e:ee:c1:dd:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.99.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1d:35:b0:de:80:df:83:51:56:67:e4:54:0d:1b:d9:26:7e:
ad:11:69:91:53:89:c7:5c:ef:2a:33:16:30:2f:8e:ee:12:76:
e8:20:f0:25:e3:26:07:b1:5d:38:2c:7d:23:33:32:ce:5e:95:
34:3e:9c:5c:dd:de:06:fb:42:9f:31:18:94:46:8c:1e:4a:e6:
59:8b:44:b5:80:a2:33:11:7e:88:9e:d0:9a:1c:0e:8e:4a:20:
ab:1d:40:bf:ca:ff:5c:45:cb:48:48:77:65:c0:ea:fd:eb:e7:
e0:62:d5:ce:c3:dc:7a:a5:b0:fe:02:6a:52:56:37:44:4f:51:
65:91:91:35:ff:03:2e:63:b3:20:16:66:e9:25:87:91:8e:13:
87:76:1d:0f:36:10:88:24:14:3f:73:93:c3:ae:8d:63:b8:46:
3b:e5:aa:d7:28:e5:f4:d0:d8:a6:53:63:ac:f3:1a:f4:f1:a0:
8c:29:85:ab:94:19:30:9d:f5:55:95:09:02:05:07:bb:c5:46:
5c:fd:ba:cf:66:50:af:0f:06:03:2e:c3:e3:95:f1:da:ad:10:
80:73:e8:c2:7e:eb:fb:fb:f0:26:72:73:94:27:89:d9:f5:8f:
cc:b9:d9:f4:2a:0f:37:a6:ea:78:2a:46:8f:a0:4d:11:09:cc:
6d:47:26:ec
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSRMsqUZjd9NtUdihs97BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDE0YTA2ZGFjODU0ZGJlZTYwOTg0NTg4ZGVjN2IzMjg0YjVhYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUZ2A3Z4xqVGr+4VIwNZA7OtGXfr
ZkpWufmkLjqWoYLjYmd2yuF9HTJLMNMpSYPIqpon3158wS0XAVyDJ/Eeq1VnLRWN
7X6w17oSLeln11pYCzXgRR+sUaXXonupgtyJlVPEjEp4hyz36NZ9yiUunSYIvhRg
Ji+bDByKntCiv2ZXQvNYUJQbpBh5hvqYfRrcGqBB88U8valEmRbfZhCcuXLNFT6y
d5nTD+d1+M/2dtUKEizJ3B6b93qVYHluovPIQEEiZk8VtTSk0qHynxPEnVR/BYpX
C/ruak00XedzUmGI6x5P1slEDIocQJAU/lx11XfW2mrx8ZsToS7uwd3myQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDQUoG2shU2+5gmEWI3sezKEtapQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzAzZGM2
ZS04NTI0LTQ1ZDctYWNjNS1lNjU5ZmRlMDUyODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDNkYzZl
LTg1MjQtNDVkNy1hY2M1LWU2NTlmZGUwNTI4OS8xL05CU2diYXlGVGI3bUNZUllq
ZXg3TW9TMXFsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWhjMA0GCSqGSIb3DQEBCwUAA4IBAQAZHTWw
3oDfg1FWZ+RUDRvZJn6tEWmRU4nHXO8qMxYwL47uEnboIPAl4yYHsV04LH0jMzLO
XpU0Ppxc3d4G+0KfMRiURoweSuZZi0S1gKIzEX6IntCaHA6OSiCrHUC/yv9cRctI
SHdlwOr96+fgYtXOw9x6pbD+AmpSVjdET1FlkZE1/wMuY7MgFmbpJYeRjhOHdh0P
NhCIJBQ/c5PDro1juEY75arXKOX00NimU2Os8xr08aCMKYWrlBkwnfVVlQkCBQe7
xUZc/brPZlCvDwYDLsPjlfHarRCAc+jCfuv7+/AmcnOUJ4nZ9Y/Mudn0Kg83pup4
KkaPoE0RCcxtRybs
-----END CERTIFICATE-----
Generated at Fri May 3 09:04:36 2024 by rpki-client on console-ams.rpki-client.org