Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.cer (raw, json)
Hash identifier: 4fxKe2zuLVg4qtx5thD+Zm9QJszbQbuLGWyLGi5pwLc=
Subject key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3493BD684FAA2651209610B861548BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41655
IP: 37.153.80.0/21
IP: 185.224.180.0/22
IP: 195.8.198.0/23
IP: 2a00:adc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3b:d6:84:fa:a2:65:12:09:61:0b:86:15:48:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:0f:d7:c2:88:8b:d1:f0:01:d5:e6:db:9a:
d1:04:85:9f:c1:d9:38:7b:40:de:59:35:e6:b6:07:
4f:50:d2:79:cc:78:20:e1:dd:c8:85:df:8e:15:f2:
b1:98:a3:a6:58:22:28:ec:bc:8b:51:20:33:85:30:
14:5a:67:91:f2:72:8e:84:46:1f:e9:f9:43:bd:8f:
33:e4:01:2d:02:d5:6c:56:1e:96:85:58:dd:ab:67:
1c:cb:d9:07:4c:f5:f1:0a:f6:c9:a9:94:f1:81:9f:
f2:65:f1:75:a9:dd:46:a6:0e:27:5f:d4:53:06:c9:
11:1b:ff:bd:62:c7:77:ce:77:1d:64:fd:07:2f:ce:
c8:2a:61:f7:b3:f6:4c:fc:36:fd:c5:6d:6c:c2:c2:
0a:75:c9:aa:2e:c4:1c:37:5a:ae:3f:d2:45:73:47:
39:b1:9d:9a:7c:fc:93:4d:83:e4:09:c3:04:8a:08:
50:cf:9d:c0:2f:0a:23:6a:8c:f2:b6:f5:d2:34:40:
1a:3f:69:8b:d4:2d:2c:f7:47:d8:ed:16:b4:c6:2f:
68:27:39:ff:3d:59:a8:3f:9c:de:53:21:43:8d:c9:
5f:dd:d2:61:84:45:88:9a:b0:a8:1e:94:0e:08:e6:
e9:be:c8:b2:7d:b5:16:59:ce:76:d4:b7:79:74:2e:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.80.0/21
185.224.180.0/22
195.8.198.0/23
IPv6:
2a00:adc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41655
Signature Algorithm: sha256WithRSAEncryption
95:cc:5f:b4:4d:f1:a3:0d:40:e6:77:4b:f0:59:d8:62:9f:8b:
c2:5a:6c:a0:45:9f:76:85:b8:e5:79:8e:c8:a9:ca:d8:51:e8:
8c:20:d8:82:31:9f:ff:5c:21:44:9d:61:b1:2b:51:32:5d:64:
8a:d9:04:91:3a:65:ab:77:de:c5:2e:e4:d7:99:d4:4a:04:ca:
c3:f7:37:78:b8:07:01:fd:1a:b9:17:77:de:d1:9f:ac:be:25:
ce:a7:93:50:8d:75:c0:6d:a8:2f:6b:19:58:d1:89:e6:2d:bb:
51:65:b1:5b:1d:50:99:82:da:e0:79:13:10:1b:68:01:40:1b:
35:c1:00:b3:13:b7:5b:f7:46:aa:c3:a1:32:9a:1e:1b:fe:27:
d6:25:47:ea:77:99:bd:60:f6:45:69:1e:1b:23:e4:7e:17:c9:
db:f3:f2:af:01:25:c7:26:17:27:b2:b9:8c:13:0d:86:4c:c3:
1f:3e:7b:16:06:a0:79:7c:00:9a:8b:95:bb:80:00:ca:cb:76:
4e:35:d0:74:1c:20:b8:f9:03:9d:3c:aa:ff:51:13:fc:50:12:
ee:c7:0d:cf:4e:75:a8:69:b4:d5:92:bb:96:19:3c:30:d1:30:
58:6f:95:ac:21:fc:81:eb:30:81:e1:74:25:1f:2e:68:a3:ba:
dd:7c:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:30:29 2024 by rpki-client on console-fra.rpki-client.org