Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer (raw, json)
Hash identifier: goq8agORaDgZuF3Qqpfcs2uKHlUTBGi2jGJb+IMLO68=
Subject key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AC469E6728A7338E2CC20F58639CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.195.150.0/23
IP: 2001:678:2e0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c4:69:e6:72:8a:73:38:e2:cc:20:f5:86:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:7f:4e:5f:be:6c:ed:8a:47:87:2f:f4:7a:
45:60:80:95:ae:e9:06:84:c0:45:0b:d0:99:f7:11:
98:27:78:ef:2c:4f:4d:ed:f9:06:57:a8:68:7c:d7:
e4:cc:7b:42:f6:0a:1e:c2:57:f4:f5:6d:e0:e5:4b:
55:f7:c1:02:72:dc:ab:12:b0:0c:66:b1:0f:9d:8d:
49:bf:5e:89:49:f0:0c:b4:f1:51:29:82:63:30:81:
3b:4b:b5:4e:6c:54:f1:5b:92:ac:79:52:08:d4:43:
7f:3f:46:30:9f:e2:5f:58:76:0b:c4:da:95:da:be:
6c:43:9a:50:8a:cb:50:1a:d9:f0:c0:6b:29:02:5b:
c1:7a:43:b4:8d:04:91:12:91:a0:25:bd:ac:4a:d2:
b3:16:d1:7b:fd:dd:e6:0a:0d:42:25:19:a8:9d:1b:
4d:cf:3b:14:94:6b:3f:5d:27:4d:1d:d4:80:e8:a0:
dc:2a:87:6b:7b:75:2e:96:8b:e8:ee:43:bd:ab:12:
bb:09:de:8e:68:f7:b9:07:64:8d:a9:97:ef:6b:a3:
b8:27:ad:09:79:a3:ad:4e:0f:04:73:ac:90:31:d7:
35:00:30:71:de:b2:06:75:11:bc:bc:14:3d:df:5b:
3a:b0:ca:81:44:af:fc:79:4a:e8:c3:c0:11:e3:0e:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.150.0/23
IPv6:
2001:678:2e0::/48
Signature Algorithm: sha256WithRSAEncryption
36:e3:56:7c:c6:f7:bf:5b:66:7b:e6:fc:d6:08:03:eb:d6:e5:
6f:15:64:8a:c9:18:44:ac:a5:38:57:e3:01:be:a1:65:89:61:
44:bb:5b:53:1e:ea:f3:ad:bb:eb:ab:56:0c:0c:8f:f3:3c:85:
75:2b:71:76:cc:8d:95:2b:63:bf:ce:a2:33:05:6d:5a:8b:86:
30:71:e6:b5:5b:dc:d2:0f:50:9b:f2:32:9f:d6:65:f8:26:a4:
b5:4e:97:e9:2d:59:d8:ba:64:6f:61:26:51:4b:ef:a5:4c:9b:
21:7b:ac:1d:32:a0:66:b6:28:2e:ac:9b:5d:ff:f3:c5:c7:b3:
41:39:21:6a:56:66:29:79:d3:57:42:e8:52:7f:68:28:e8:e2:
01:d8:11:b0:aa:1a:0a:e7:08:89:ca:3d:18:9b:28:c7:47:45:
98:18:16:f4:e9:e4:86:96:95:a8:4b:97:c0:d8:76:e7:ef:14:
da:05:4f:24:5a:49:d0:6d:22:3d:47:bd:39:37:84:4a:80:10:
8e:cc:66:d2:01:a0:a9:a0:41:64:0d:3c:2d:d6:a1:51:f8:a6:
dd:a2:34:fb:ac:2e:7d:33:44:7a:ea:35:52:d8:da:7e:e4:b9:
be:82:ef:93:98:9b:a2:9d:02:61:ed:2a:79:b1:bb:66:f0:db:
25:1e:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:30:09 2024 by rpki-client on console-ams.rpki-client.org