Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NMzTjbMcyeLZyMP9nQNvaSTncPA.cer
File: NMzTjbMcyeLZyMP9nQNvaSTncPA.cer (raw, json)
Hash identifier: RIVhkkDx9mJCSGR5HRtqjaqhRykoVpAl44ZB2+vnkSw=
Subject key identifier: 34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B68D7E5A4F51710E59088A7FE20762
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204785
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8d:7e:5a:4f:51:71:0e:59:08:8a:7f:e2:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34ccd38db31cc9e2d9c8c3fd9d036f6924e770f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:3f:9e:2e:e4:08:a5:35:45:7e:8d:11:bc:
c7:ad:86:b0:b0:48:4b:c7:70:fb:6e:33:9b:bc:7d:
25:83:3f:f9:5f:5e:9d:d2:1c:a8:6e:f4:80:7f:17:
30:dd:dc:f4:75:bc:28:95:82:c6:5e:c2:e9:1f:fb:
65:eb:e4:f2:1a:23:ca:79:c8:18:5a:f2:43:e1:fc:
f3:2c:b6:54:44:8c:e2:27:c7:13:cc:8e:14:54:14:
e0:71:75:2d:67:1b:c7:6f:c6:c1:4f:9c:84:64:a3:
95:45:bb:02:5a:67:2b:8d:2a:f6:e9:6e:8d:55:61:
59:f0:26:76:2a:dd:f6:d0:29:90:c6:06:37:ae:75:
bc:af:41:7c:88:7f:9c:a8:89:91:93:80:2c:6a:d3:
03:78:4f:18:64:4b:5c:4e:a6:6f:2f:23:03:ca:39:
c9:44:0d:6b:0d:19:fe:a0:a3:3c:9b:ac:79:99:9d:
b9:85:1c:4f:99:ae:1e:fb:b9:b8:11:a2:16:99:c9:
d3:dc:39:45:42:a2:1a:18:ac:e1:48:18:bb:6e:9d:
38:9e:bc:f4:63:bb:6e:71:0e:cb:67:5f:fe:1e:c6:
db:af:43:a1:4f:0d:1b:7b:46:f4:e2:a0:f8:2d:ef:
2d:cb:16:6e:e3:11:22:7c:8a:7f:2e:5a:eb:b5:91:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204785
Signature Algorithm: sha256WithRSAEncryption
8e:6a:fb:41:1f:ed:b5:86:22:7f:94:56:ea:24:be:21:32:a8:
f7:00:7d:0e:21:c0:74:e9:7f:00:98:8c:9f:85:ac:fe:85:7a:
6c:01:85:fe:5c:a0:e0:9c:94:82:c6:a3:96:89:56:42:22:34:
58:25:82:76:e5:19:ff:5e:5d:18:5e:fe:e9:27:0a:1b:da:94:
8b:56:36:4e:85:f8:43:86:96:4a:21:7b:95:7e:de:24:c8:c8:
ad:ef:31:62:4d:08:5f:8c:cb:09:60:ef:40:36:c7:06:6f:1c:
1a:7b:18:78:d2:55:a5:6c:5e:7d:50:5e:8a:05:18:1b:c2:3b:
5c:68:98:54:20:89:70:d4:ed:04:ab:58:bb:75:bc:b3:dd:d8:
96:37:bd:dc:54:42:5b:8f:2e:2f:a5:31:f9:e2:07:9c:8c:06:
79:8c:ff:67:0d:78:39:3e:e4:46:9b:8d:6d:ad:55:82:8c:22:
2e:82:14:92:08:c4:7d:74:a0:7c:fd:b1:94:b7:ab:29:8a:35:
28:a0:d4:d1:4c:04:fb:36:30:cd:b3:c8:5a:f6:c8:85:c8:d4:
26:7e:2f:0a:f6:60:1c:3f:9b:e2:6e:c2:db:78:82:74:cd:8a:
80:d9:43:47:a1:70:71:32:21:f2:8d:0d:86:fd:1a:fa:44:e8:
a8:32:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:17 2024 by rpki-client on console-fra.rpki-client.org