Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer (raw, json)
Hash identifier: FfIFjFkFauvJbSMMbD4YcuO7LD6buOntZww9+jpfJ6Y=
Subject key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87134047EC876B513929A9853F1A413
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.246.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:34:04:7e:c8:76:b5:13:92:9a:98:53:f1:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b960f6f19255ea39666f833ebe271761994b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:0d:2d:08:68:2a:f2:97:db:f8:91:d7:ce:
15:2c:41:6b:be:d3:40:08:e4:3f:c5:3f:94:f6:0a:
cc:5b:72:0b:b3:15:d8:3a:e0:46:4b:07:c3:d0:17:
db:df:e5:ce:52:e6:2b:63:df:f2:ae:09:e2:50:16:
a4:52:4d:c7:3a:76:ba:8c:95:c7:cc:cc:bd:32:38:
bd:89:c8:a4:cc:0a:0a:74:62:ca:b7:38:fb:82:fc:
7c:a1:6f:c1:e6:c1:8e:d6:6b:d8:c0:fa:50:d5:7e:
33:6b:d4:b7:66:b9:b1:b0:67:1f:1f:35:28:f9:f2:
59:c0:f5:32:53:b9:9a:90:41:38:0c:6b:ff:3e:ce:
9a:09:3d:97:5e:92:bb:76:a4:3e:f3:40:af:8c:07:
25:85:08:e0:d8:bb:01:d2:75:f0:8d:6d:14:d2:60:
72:f5:19:d2:95:fb:b3:48:e5:14:98:51:c7:b2:1e:
7e:63:71:a3:2f:d7:31:8c:8b:87:b0:af:0a:9e:23:
eb:be:1d:00:9c:b4:8a:23:04:e3:a8:ab:e5:53:da:
b0:2a:3d:e1:81:5d:fe:c8:85:eb:f9:1f:e9:8a:73:
99:07:d8:55:c7:98:5a:e8:07:3c:4e:77:c5:8d:83:
4c:11:83:bb:06:fa:12:4f:39:62:d5:77:94:75:36:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.246.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f8:db:f0:c4:36:b8:7e:d6:3a:6e:69:9e:9f:7c:8a:56:ae:
51:74:84:e8:cb:b6:ca:cb:28:22:4f:0d:60:50:2e:f8:08:ed:
1d:38:8c:a6:c3:c0:c6:a6:94:60:25:37:83:7c:ee:d0:45:0f:
9d:18:b4:e7:ea:29:20:07:1e:13:7f:fc:6c:21:14:ca:49:28:
78:3c:28:c1:f7:b1:79:e9:44:22:9e:e2:f3:fb:14:d5:eb:0f:
d8:1b:0e:2a:2b:dd:84:e5:ed:9c:17:dc:fb:79:98:1c:a1:31:
d6:4a:38:16:12:74:66:d9:68:f6:07:d2:93:4c:51:4a:26:14:
e7:b8:57:30:d4:06:0b:54:0c:4a:5e:08:5f:f0:c2:12:75:4c:
48:45:0c:7c:18:a5:02:d3:3f:d3:05:a2:ec:a8:f0:4e:12:28:
75:36:5e:6b:ab:fa:ed:5e:56:ad:59:3c:60:d3:10:a0:aa:ed:
ea:c0:98:b4:36:39:7b:53:e8:b7:a5:ac:de:39:cf:2c:a6:96:
72:63:d4:2c:d5:22:54:57:db:9e:4b:89:cd:97:74:30:17:00:
42:5e:45:32:d2:20:f8:6d:23:99:84:a9:22:00:f0:81:d2:9e:
e6:08:89:41:7c:24:b2:9f:7e:57:f3:bb:02:f5:d7:ca:d3:9c:
1a:5f:ae:38
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIcTQEfsh2tROSmphT8aQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGI5NjBmNmYxOTI1NWVhMzk2NjZmODMzZWJlMjcxNzYxOTk0YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb4NLQhoKvKX2/iR184VLEFrvtNA
COQ/xT+U9grMW3ILsxXYOuBGSwfD0Bfb3+XOUuYrY9/yrgniUBakUk3HOna6jJXH
zMy9Mji9icikzAoKdGLKtzj7gvx8oW/B5sGO1mvYwPpQ1X4za9S3ZrmxsGcfHzUo
+fJZwPUyU7makEE4DGv/Ps6aCT2XXpK7dqQ+80CvjAclhQjg2LsB0nXwjW0U0mBy
9RnSlfuzSOUUmFHHsh5+Y3GjL9cxjIuHsK8KniPrvh0AnLSKIwTjqKvlU9qwKj3h
gV3+yIXr+R/pinOZB9hVx5ha6Ac8TnfFjYNMEYO7BvoSTzli1XeUdTbgGwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDS5YPbxklXqOWZvgz6+JxdhmUsVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2I3MGY1
Yy1lODMxLTQyN2EtYWRhNC0zYTczYmU5MGE1MDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYjcwZjVj
LWU4MzEtNDI3YS1hZGE0LTNhNzNiZTkwYTUwNi8xL05MbGc5dkdTVmVvNVptLURQ
cjRuRjJHWlN4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQATfb2MA0GCSqGSIb3DQEBCwUAA4IBAQB4+Nvw
xDa4ftY6bmmen3yKVq5RdIToy7bKyygiTw1gUC74CO0dOIymw8DGppRgJTeDfO7Q
RQ+dGLTn6ikgBx4Tf/xsIRTKSSh4PCjB97F56UQinuLz+xTV6w/YGw4qK92E5e2c
F9z7eZgcoTHWSjgWEnRm2Wj2B9KTTFFKJhTnuFcw1AYLVAxKXghf8MISdUxIRQx8
GKUC0z/TBaLsqPBOEih1Nl5rq/rtXlatWTxg0xCgqu3qwJi0Njl7U+i3pazeOc8s
ppZyY9Qs1SJUV9ueS4nNl3QwFwBCXkUy0iD4bSOZhKkiAPCB0p7mCIlBfCSyn35X
87sC9dfK05waX644
-----END CERTIFICATE-----
Generated at Fri May 3 07:30:54 2024 by rpki-client on console-fra.rpki-client.org