Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.cer (raw, json)
Hash identifier: csHz8LTv56Bb0kb6Rg9K3fdV2m0ucW78Ibmmyo41eXE=
Subject key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493919E6C1D65FC2CE6DD723DFC9237
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.98.152.0/22
IP: 2a01:a480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:91:9e:6c:1d:65:fc:2c:e6:dd:72:3d:fc:92:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:65:ca:19:91:ff:5c:b8:30:83:4f:16:b1:
6d:68:a2:82:68:d4:d3:20:15:28:09:b0:e0:e5:0f:
00:ed:fe:76:10:d8:18:99:85:1e:f6:55:93:89:06:
19:c0:9d:6a:1f:6d:b4:59:30:c0:55:b1:c0:bc:e5:
62:95:b1:27:5d:21:4d:e9:ae:98:54:63:98:b7:c5:
ab:b7:10:e0:13:ff:05:89:cf:26:96:2c:d4:c4:b7:
a2:61:a5:59:7c:49:5e:68:68:3c:65:aa:8f:e4:14:
d9:76:a2:8a:45:41:11:21:5c:bf:0f:2e:98:18:8a:
4b:e1:5a:e2:13:02:0e:53:7e:dc:ba:ab:23:31:0b:
b6:0d:8d:c9:23:1f:0e:24:f8:ce:4b:01:fa:9a:f3:
69:4c:46:28:17:41:c5:8f:ee:c1:23:3f:75:6e:c0:
f3:89:5e:6e:ad:9b:ba:bf:75:c7:23:1f:d9:03:a6:
ea:cd:d2:c1:66:d3:b5:ec:13:66:d7:c8:5f:62:ff:
9d:36:36:9e:e5:f4:e6:1f:35:a9:13:71:e0:ec:91:
35:24:74:5b:b5:68:34:1b:f1:53:99:cc:76:6d:8d:
11:91:fa:47:b6:d6:dc:33:a7:d6:f5:5e:55:0c:e3:
6f:19:79:08:53:85:53:8b:99:bc:0c:d6:6a:e3:a2:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.152.0/22
IPv6:
2a01:a480::/32
Signature Algorithm: sha256WithRSAEncryption
33:7d:75:9b:f6:16:f6:e5:0e:16:70:66:fc:75:29:ae:3a:5e:
a4:f9:97:e7:b3:48:78:8c:f1:5c:69:79:49:85:99:1a:7b:24:
1e:70:57:c8:43:f1:22:00:37:47:f3:c7:38:a9:4b:27:6f:f4:
d8:a5:26:ac:15:a9:ad:36:bb:50:8c:44:c4:fe:cc:6d:e1:cc:
09:2d:26:f9:a3:b2:19:85:ff:85:43:6c:33:a2:18:a2:7a:42:
66:2a:7b:10:36:2d:f2:7f:ef:f4:61:1e:71:fd:91:67:2a:fb:
94:04:5b:78:1a:d8:34:c5:71:82:e6:00:bf:67:9e:a2:96:8f:
30:2f:b5:33:cb:bb:c9:7b:7e:fd:81:99:bc:f5:f5:6c:e7:0d:
d2:40:9d:95:72:06:e4:ef:52:af:e8:da:9f:dd:29:ae:31:ea:
1b:5d:35:15:33:15:2e:28:6e:66:24:bf:0d:03:73:1d:41:78:
22:52:50:2d:79:e1:4f:94:8c:27:18:8d:c4:1d:44:b0:dd:23:
41:8a:66:21:9c:0c:58:07:eb:92:2b:51:37:3c:1d:01:cc:3e:
9c:9c:bc:bc:15:ff:b6:a6:e1:62:78:8f:10:41:be:e0:ab:dd:
e9:2f:99:53:c7:a8:e5:43:1f:ae:c6:28:62:21:90:61:8e:ba:
15:94:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:11:18 2024 by rpki-client on console-fra.rpki-client.org