Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
File: NHjAigY6wtNKGxkeJDY4m77tXpc.cer (raw, json)
Hash identifier: aZL1IOoEaFh4eZGXRFzXg3sK4y3GN9oWUUpDZZNC8cM=
Subject key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DE2A8E1DA36EA6613E6FC5B4A7E70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50774
IP: 193.108.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e2:a8:e1:da:36:ea:66:13:e6:fc:5b:4a:7e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:0c:b3:b5:16:8e:4a:6a:e4:4a:95:9b:20:
fd:38:78:2b:4c:9b:75:96:69:0b:de:3f:68:06:b3:
31:08:1f:a0:e2:27:c7:5e:a0:da:26:f1:15:8a:f4:
36:1e:90:ab:94:44:13:51:0d:d0:43:b3:95:8d:0e:
28:47:89:2f:c1:18:37:57:50:25:6d:76:6b:66:9c:
3e:81:b5:39:1b:04:94:6c:31:4d:3e:c8:8f:58:8f:
ad:7f:63:77:aa:03:60:9d:ce:f9:bc:b4:26:e0:0a:
28:98:d0:08:17:c9:28:25:41:7e:c0:c9:0d:36:4b:
b1:ce:3c:cc:e5:ae:61:5c:c1:e3:30:b1:26:99:13:
0d:cc:93:88:c0:89:bb:bb:22:26:43:27:b8:8b:d5:
07:35:b9:c7:5b:69:a6:6f:0d:4d:b6:ed:4f:b3:c3:
57:29:d2:07:fa:68:37:aa:db:35:67:45:24:69:e8:
72:86:81:fb:40:f5:e0:6d:0a:41:73:0c:46:9a:3c:
7b:13:d8:24:6d:06:41:33:17:f7:8f:1d:53:90:3b:
84:54:ef:87:69:33:f9:90:50:4b:ea:10:fb:a6:4d:
52:21:a8:ca:06:8d:41:45:7e:f7:6a:3f:af:67:ad:
42:23:bd:9c:43:6b:ef:f5:8d:d3:39:99:c7:12:79:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50774
Signature Algorithm: sha256WithRSAEncryption
7a:74:38:69:9b:a0:64:ac:64:23:58:4d:d7:49:15:22:09:bc:
93:60:9a:77:cb:ad:d9:47:39:08:0d:48:6b:99:e2:d7:0c:9b:
a7:51:78:c1:ee:14:7f:2b:64:e2:30:15:89:12:d7:8a:bc:2a:
52:8b:92:18:e1:6a:ae:57:97:1f:42:0c:03:d3:16:c3:ec:7d:
a2:79:47:aa:a8:d0:57:32:69:de:df:b9:dd:04:d9:71:0a:44:
d4:6a:53:aa:9b:06:d9:64:6b:41:3c:7d:f2:3c:f3:54:6e:82:
55:87:76:c8:d3:15:01:3b:fd:64:ed:92:60:be:64:79:7f:ed:
af:ef:3d:74:f4:07:94:cc:16:f6:8a:ab:55:4e:d2:70:36:88:
76:88:1d:f1:73:09:f5:c2:a7:d4:d6:5b:b8:b9:a2:61:44:54:
8c:e8:3f:ca:d5:67:59:f0:d5:8c:26:d6:4d:d0:f9:88:b8:5a:
0d:fd:37:8e:c9:9c:77:ee:1b:aa:a8:ec:56:33:14:9a:7c:45:
11:e2:b3:d4:00:2d:f8:fe:6f:94:fc:c1:9e:82:86:8c:88:e3:
53:7f:fe:69:9e:dc:a3:bc:07:ed:70:34:3f:8e:6f:24:e4:bc:
8c:0e:95:48:1d:8e:1f:b5:80:01:39:2c:2a:8b:8f:6f:87:31:
d1:78:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:21 2024 by rpki-client on console-ams.rpki-client.org