Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
File: NPWeovpHqdYxGxyMxahqW5oOR6c.cer (raw, json)
Hash identifier: +16jeOsFc6hOUzP7dXUkKAMsmyr4yzmdXlkgaEymw7I=
Subject key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254659AA6783CB3551E87D46D6C506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25089
IP: 194.107.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:46:59:aa:67:83:cb:35:51:e8:7d:46:d6:c5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:7e:f4:f3:32:fe:0b:89:87:c1:0f:fd:1f:
2e:9a:cb:70:14:e8:e1:01:b6:df:e2:f0:27:a8:90:
66:22:bd:27:d8:a7:08:e2:1d:33:ff:97:3b:20:66:
34:31:9b:1a:99:6a:91:5f:d8:92:c8:86:53:5f:21:
32:91:2b:60:33:fb:56:d1:ea:94:f9:c9:3f:ee:27:
12:a2:12:9f:d0:7f:4a:ec:51:20:7e:af:dc:89:ca:
46:26:da:1d:ca:89:93:ad:6d:29:17:32:80:bb:9a:
a6:69:4b:1f:e3:54:ba:ab:6a:68:98:0a:33:84:a0:
5d:ab:4c:41:58:93:0e:20:ab:bb:28:25:d2:31:b0:
ba:54:f0:22:1c:74:c5:ce:eb:07:28:31:75:cb:d2:
28:77:22:12:7a:64:5b:42:93:66:61:2c:dc:1a:ca:
d0:fc:52:34:cd:a1:a8:ff:f2:8f:16:53:7a:c7:c6:
bc:b6:85:cb:f6:18:3b:18:f8:05:09:72:a2:34:35:
b9:45:83:6b:6d:12:14:0e:73:f0:5f:ba:29:27:fc:
74:d3:08:2b:d8:61:ce:0c:59:1a:bf:1d:50:8c:2c:
18:a5:95:a5:a5:63:13:64:11:65:1f:92:ac:70:02:
6a:03:b6:68:6a:56:43:f6:6b:97:3a:1f:fd:7d:ec:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25089
Signature Algorithm: sha256WithRSAEncryption
9c:f5:28:81:96:de:8a:fb:07:82:5d:bc:f8:41:59:89:4e:02:
ca:37:ad:71:15:56:50:fc:ea:15:2e:03:4f:58:ae:aa:81:c3:
62:96:c8:19:8a:5f:1a:13:23:fb:52:40:74:da:b4:c7:29:18:
45:4b:68:db:c3:da:f1:18:ac:cc:d0:e3:89:3d:df:c2:c3:c7:
56:f4:6e:5d:04:de:4b:9a:ba:8d:35:72:e1:b6:bc:1c:7f:c4:
5f:1c:df:d1:f7:19:be:70:51:52:ca:d6:a3:4f:9e:f9:0c:06:
af:47:b2:88:3d:07:2e:57:d1:d6:92:2e:5e:b9:97:b1:57:fe:
63:9d:84:16:23:97:8e:3c:8d:29:13:8c:1b:f4:c5:60:d3:25:
b3:19:dc:6b:5f:f9:85:d7:a9:1b:43:1f:aa:20:96:f5:1a:c6:
3c:b1:39:89:f5:de:25:d7:ff:26:62:5d:ff:cc:09:a9:dc:b9:
bd:3e:14:83:9f:5d:18:86:3b:59:4e:c9:fe:d2:e9:59:94:e3:
00:81:75:ae:59:6e:2a:38:e8:36:10:bd:d9:a3:16:e3:f4:a0:
62:39:00:ab:03:c4:21:e2:40:a8:ef:14:2e:61:03:8d:6d:a3:
e9:57:ec:a1:59:fb:8e:63:f6:51:e1:9a:5a:aa:39:7b:c0:a0:
cf:4a:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:04:44 2024 by rpki-client on console-ams.rpki-client.org