Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
File: NLjV-ROFaLUssJNuK0yU93zleuw.cer (raw, json)
Hash identifier: OC+QvOai1e2sSyt+W8OniktL0NNidmoMg2pvr1S7rfs=
Subject key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801E38766FB48C31F399BC873F223D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197870
IP: 176.57.40.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e3:87:66:fb:48:c3:1f:39:9b:c8:73:f2:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:f0:7d:7d:ef:1d:f4:17:7d:87:5a:f9:8d:
e6:c9:3c:46:16:fb:8f:40:ce:4d:08:47:40:e0:2f:
63:cd:63:23:df:4b:6c:dc:19:83:79:16:55:f7:0e:
e6:ff:06:8d:0c:8b:97:d8:f5:51:cf:15:23:53:53:
7c:32:f3:81:96:7f:d3:b6:c6:1a:ee:cf:c3:9e:b3:
2e:52:58:36:68:c8:67:9b:a4:c6:e1:81:7e:90:97:
4e:d7:a4:62:fa:3f:5e:a0:d9:72:2b:f9:ab:3e:76:
15:23:57:df:df:10:59:b0:74:6e:9d:52:0f:93:cb:
6e:c9:02:a0:40:f5:bb:c7:fe:37:4c:b2:52:72:e3:
b0:b5:ef:24:63:e7:9e:8b:56:01:0e:8b:96:d0:00:
30:6b:1b:c4:ef:c3:03:c7:74:c8:32:13:6e:10:79:
41:bd:10:33:f4:22:fe:ff:d0:78:a7:3b:22:2a:90:
fd:d7:45:06:6d:4e:dd:33:98:66:56:93:54:11:db:
0d:86:7b:e2:e4:f5:86:ed:2d:c0:cd:03:90:1c:46:
a4:51:c0:0c:42:18:93:83:1c:a6:ac:78:71:a1:9e:
7b:7e:e4:ba:94:c5:e9:3a:73:20:37:62:2a:1d:32:
3c:5c:80:c1:6f:d8:d6:38:f6:03:21:9d:1e:27:5f:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.40.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197870
Signature Algorithm: sha256WithRSAEncryption
5a:b0:7a:9a:da:9c:90:f4:d1:d0:d5:87:fb:b8:6b:22:01:7c:
91:dd:eb:0a:3f:f2:e1:e2:9d:74:cc:66:4b:f7:d7:f5:79:6d:
2f:3d:55:e9:fe:c0:7c:b8:b6:a5:0b:b4:2b:bf:ae:20:b5:38:
44:ef:ca:06:92:d4:1c:a1:c3:43:e7:64:1c:6a:cb:81:85:1b:
3a:50:72:7e:fd:44:8d:40:e8:6e:72:ed:0f:00:05:2f:47:2c:
10:55:3b:f0:5d:55:0c:fc:50:7c:9e:eb:0b:c0:a9:89:f5:22:
97:8a:56:b0:33:a6:08:52:48:6e:9a:01:fc:47:70:3b:30:57:
31:bd:3d:53:28:29:38:c4:ec:09:58:c3:13:99:15:01:45:5a:
68:38:61:bf:99:dd:e5:65:20:d8:01:58:8c:b5:d7:03:dd:5f:
86:4a:04:c1:ac:17:7b:5c:82:95:7d:0f:eb:26:c7:96:de:c6:
e6:e7:31:f7:5f:0b:6c:f5:ff:0c:ee:23:86:89:00:ce:17:92:
99:4c:bc:37:86:30:78:38:b0:4e:de:c0:ba:d4:52:a9:0a:9f:
bc:40:a3:02:50:6c:ff:e2:58:9d:43:35:f6:9b:a7:14:5f:e5:
1e:77:c5:22:b9:45:0c:91:22:22:e1:ba:57:a2:8c:69:29:1f:
fb:f1:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:13:19 2024 by rpki-client on console-fra.rpki-client.org