Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer (raw, json)
Hash identifier: wqHvXHg4uVJ9t8QZTTNvedN71MeZhCwh6DGBxmUP41I=
Subject key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC9E84898DE8DACF7744D142FCE6F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.56.204.0/22
IP: 2a0c:8f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9e:84:89:8d:e8:da:cf:77:44:d1:42:fc:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:f8:ca:93:2c:d1:c6:40:d2:e2:4d:49:06:
d1:5e:f2:57:57:3f:9e:c5:26:49:4c:02:7d:f8:5b:
e2:93:50:f4:e9:41:8a:d5:e9:c4:0f:a4:55:af:36:
ba:92:83:cd:5a:70:83:46:fa:61:5b:fe:aa:91:36:
23:21:6e:5a:0a:49:bd:01:52:28:1f:e7:c0:be:31:
4d:13:04:e1:34:78:e8:51:a0:df:ee:53:ed:e6:64:
92:b9:eb:8a:5c:77:1d:0e:50:85:2e:58:ad:9e:80:
68:e8:fd:a9:37:2c:0d:c8:76:3f:92:8f:94:03:ca:
79:32:6f:5e:7c:00:4e:52:bd:c4:f2:8b:78:f0:2e:
87:c9:6b:e5:9a:1e:01:5b:08:8f:a8:03:bc:a9:42:
10:e2:13:df:15:c8:53:a6:06:bd:f5:bc:f4:df:83:
e6:3d:9d:ef:6a:1f:90:f7:d5:64:70:d3:22:a0:ce:
8c:01:68:37:54:00:9f:d8:79:90:65:dd:61:4d:9e:
50:1b:33:7f:5c:c3:ef:ff:45:b7:8a:a4:4e:a5:ba:
1f:33:83:5a:cb:f6:45:b6:ab:2e:83:90:d1:41:af:
c7:92:7d:04:94:5a:d7:f6:8e:5f:79:26:ee:af:98:
75:1b:2a:0e:05:4c:4d:cd:20:c3:5f:2a:5b:6d:6c:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.204.0/22
IPv6:
2a0c:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
10:9f:63:af:d8:1e:bc:8f:08:c4:41:52:6d:6f:a0:f6:0e:a4:
5a:2f:ff:61:c7:e2:d8:b2:30:82:0e:c1:f0:7a:be:6b:d4:da:
55:43:b0:37:d4:17:8b:4d:13:13:48:d2:be:d0:c8:b4:9c:03:
be:c0:33:5c:ca:e1:a9:d3:8b:93:ac:e3:29:b8:ac:89:99:0f:
23:ab:38:91:cc:35:31:54:36:a4:d8:66:42:d2:61:49:61:e4:
b1:5d:d0:7d:27:55:a1:05:cd:91:5d:56:09:b2:98:a5:13:84:
9a:89:82:68:6d:d1:85:d9:4c:a7:91:9b:9e:7c:0e:00:46:b2:
83:1c:8e:1f:72:65:89:59:b9:8b:94:12:f2:32:b3:5b:89:e5:
a8:db:e4:2d:e3:94:40:22:00:ad:f0:bc:90:2e:e6:90:1c:87:
cf:24:bd:f5:d4:88:56:20:0c:8e:55:ff:5b:ad:80:f1:8f:22:
9a:e1:8b:ae:15:e6:cd:a5:2c:e9:51:3c:1f:48:82:6f:5d:26:
e2:da:4d:43:20:d3:32:b2:04:a8:fa:45:61:e6:db:df:13:50:
29:02:31:68:4c:60:48:e8:3b:ca:c4:88:4b:5e:82:43:5a:45:
3c:45:3d:b0:e7:c0:e1:d4:e0:e7:07:c5:cf:9b:9f:48:03:72:
91:38:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:42:38 2024 by rpki-client on console-ams.rpki-client.org