Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NQfUfuTpf2v9OsTOB7-ZwFVMmks.cer
File: NQfUfuTpf2v9OsTOB7-ZwFVMmks.cer (raw, json)
Hash identifier: i6kTSLkPXnoY2EkERfzvnuYlXWGTJFy8U8C8XdwbZYQ=
Subject key identifier: 35:07:D4:7E:E4:E9:7F:6B:FD:3A:C4:CE:07:BF:99:C0:55:4C:9A:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3CB829DA2AD847F687E1FA13CC12444
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft
caRepository: rsync://0.sb/repo/sb/35/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 06:52:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.220.25.0/24
IP: 2a12:f240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:cb:82:9d:a2:ad:84:7f:68:7e:1f:a1:3c:c1:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:52:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3507d47ee4e97f6bfd3ac4ce07bf99c0554c9a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:e4:ba:21:6e:e6:3c:d4:dd:f5:35:86:8c:
92:ba:3d:8d:00:b9:b6:b2:ec:e1:2d:35:64:e3:29:
2f:a1:10:80:52:bb:9b:69:58:3f:0d:12:cd:95:6b:
d2:58:72:9c:7b:38:cd:5c:6a:0d:ea:d3:81:dc:90:
75:c8:25:6a:96:9e:91:41:9f:e4:ad:82:9f:fa:d7:
f4:30:71:a0:e6:da:6b:f0:da:cd:6e:ff:8e:76:f2:
dc:80:98:21:03:97:d6:aa:2e:c9:9c:e3:f4:41:7d:
09:17:68:0b:78:a9:05:9f:ff:f4:c8:e5:89:57:25:
37:a2:7d:ca:90:77:b7:45:09:65:52:04:4d:71:d0:
25:e3:07:3b:80:e8:ed:55:46:c7:14:4a:03:0a:0e:
b5:68:a9:11:b1:e2:99:a7:3c:ae:11:f3:3c:4d:f8:
46:f5:b9:c8:0d:ae:2f:39:9a:8f:86:4c:fa:53:a8:
e6:11:58:31:7d:da:b9:82:04:03:8a:fd:bf:9c:c0:
45:95:7b:c9:63:f0:19:03:e5:27:ec:10:2c:0e:61:
a6:ff:2a:27:50:7c:51:00:cc:e5:13:ee:76:f1:79:
a1:f5:51:ff:e4:e2:27:d3:38:3f:c2:79:a2:8f:27:
58:fc:38:99:17:04:f9:34:e3:82:ba:fa:bb:a7:ee:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:D4:7E:E4:E9:7F:6B:FD:3A:C4:CE:07:BF:99:C0:55:4C:9A:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/35/
RPKI Manifest - URI:rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.25.0/24
IPv6:
2a12:f240::/29
Signature Algorithm: sha256WithRSAEncryption
2f:e1:51:bd:e7:5c:fe:ce:bb:32:8b:97:c5:48:2c:b2:19:25:
cf:a8:be:dc:82:b6:79:fd:6d:00:48:5f:d3:8b:24:5e:45:91:
d3:7c:16:0c:95:46:93:62:5a:9b:9d:c0:91:69:6f:b8:44:fc:
6c:ab:31:c0:f4:7f:86:3b:f6:96:10:23:54:a3:b0:52:c2:24:
af:e4:bc:71:2e:b9:1a:75:cb:b6:8b:f4:fe:c9:07:f3:11:e8:
5f:e4:80:d3:1c:2b:3a:6f:f0:ce:52:7c:86:cd:9c:a9:87:07:
45:8e:6f:55:37:1e:ef:28:46:d3:e3:e7:a3:71:7d:5a:b0:83:
7e:d4:b4:85:44:03:d4:50:da:75:49:3d:ca:93:7f:13:5f:ae:
37:8b:74:73:12:56:3d:d6:fb:b5:0f:85:bb:bc:df:b8:2a:5f:
d5:c5:b0:d4:64:ee:76:fa:28:2a:1c:bc:29:f4:11:bf:5a:e1:
aa:28:07:54:d4:13:ba:77:d0:de:0c:3a:7e:18:76:b0:ad:f5:
4f:24:b4:3a:ec:67:fb:21:03:dc:66:87:b4:72:c7:ad:20:81:
49:d9:7c:77:80:03:81:4d:31:f3:aa:ed:e8:1a:1a:93:77:dd:
d6:15:67:c3:ab:b9:c7:98:48:e8:42:3f:77:c6:ef:5f:9e:d2:
8b:d3:ed:e6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzDy4Kdoq2Ef2h+H6E8wSREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDY1MjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA3ZDQ3ZWU0ZTk3ZjZiZmQzYWM0Y2UwN2JmOTljMDU1NGM5YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15DkuiFu5jzU3fU1hoySuj2NALm2
suzhLTVk4ykvoRCAUrubaVg/DRLNlWvSWHKcezjNXGoN6tOB3JB1yCVqlp6RQZ/k
rYKf+tf0MHGg5tpr8NrNbv+OdvLcgJghA5fWqi7JnOP0QX0JF2gLeKkFn//0yOWJ
VyU3on3KkHe3RQllUgRNcdAl4wc7gOjtVUbHFEoDCg61aKkRseKZpzyuEfM8TfhG
9bnIDa4vOZqPhkz6U6jmEVgxfdq5ggQDiv2/nMBFlXvJY/AZA+Un7BAsDmGm/yon
UHxRAMzlE+528Xmh9VH/5OIn0zg/wnmijydY/DiZFwT5NOOCuvq7p+6jPwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDUH1H7k6X9r/TrEzge/mcBVTJpLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbgGCCsGAQUFBwELBIGrMIGoMCQGCCsGAQUFBzAFhhhyc3lu
YzovLzAuc2IvcmVwby9zYi8zNS8wUAYIKwYBBQUHMAqGRHJzeW5jOi8vMC5zYi9y
ZXBvL3NiLzM1LzM1MDdENDdFRTRFOTdGNkJGRDNBQzRDRTA3QkY5OUMwNTU0QzlB
NEIubWZ0MC4GCCsGAQUFBzANhiJodHRwczovLzAuc2IvcnJkcC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAW9wZMA0EAgACMAcDBQMqEvJAMA0GCSqGSIb3DQEBCwUAA4IBAQAv
4VG951z+zrsyi5fFSCyyGSXPqL7cgrZ5/W0ASF/TiyReRZHTfBYMlUaTYlqbncCR
aW+4RPxsqzHA9H+GO/aWECNUo7BSwiSv5LxxLrkadcu2i/T+yQfzEehf5IDTHCs6
b/DOUnyGzZyphwdFjm9VNx7vKEbT4+ejcX1asIN+1LSFRAPUUNp1ST3Kk38TX643
i3RzElY91vu1D4W7vN+4Kl/VxbDUZO52+igqHLwp9BG/WuGqKAdU1BO6d9DeDDp+
GHawrfVPJLQ67Gf7IQPcZoe0csetIIFJ2Xx3gAOBTTHzqu3oGhqTd93WFWfDq7nH
mEjoQj93xu9fntKL0+3m
-----END CERTIFICATE-----
Generated at Fri May 3 06:57:45 2024 by rpki-client on console-ams.rpki-client.org