Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.cer (raw, json)
Hash identifier: sm6kGPOm6Vb8UA4v9T/TMjIIlXjG5wMQTbA6YLa7ULY=
Subject key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01924745F010A33E50CBFD5F2F13DBE779FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Oct 2024 08:50:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35600
IP: 31.193.240.0/21
IP: 45.84.112.0/22
IP: 91.221.92.0/23
IP: 91.221.106.0/23
IP: 185.48.132.0/22
IP: 185.49.123.0/24
IP: 185.56.176.0/22
IP: 185.74.52.0/22
IP: 194.117.246.0/23
IP: 2001:67c:184c::/48
IP: 2a00:4780::/32
IP: 2a02:5520::/32
IP: 2a0e:ac80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:45:f0:10:a3:3e:50:cb:fd:5f:2f:13:db:e7:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 08:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:f2:e5:05:92:3e:e2:4a:fb:6e:f3:94:45:
8e:bd:dc:a0:cf:ef:3f:4a:a0:58:fa:9e:7c:a3:32:
88:aa:d5:8a:c7:65:ea:cd:b9:5a:f8:9f:d7:d6:03:
6a:80:ed:9c:4a:18:87:94:08:99:79:33:92:9e:24:
68:27:e3:aa:27:9b:90:b0:98:02:24:55:e3:d2:d5:
d6:57:6f:bf:5a:7a:15:2c:83:06:33:5a:97:db:46:
0b:b5:d4:aa:00:76:66:b5:cb:e0:0b:4c:06:77:c7:
3e:cd:ba:7c:00:d4:44:d2:42:f0:e7:15:d0:fc:be:
54:7d:3a:ec:e0:95:6f:38:df:62:62:2d:63:d8:02:
8f:dc:b2:ed:86:1c:be:e3:16:54:7c:34:61:96:f0:
b9:ad:15:0d:20:3f:e5:17:1d:b4:3d:c8:0f:37:f6:
71:18:33:be:e2:9c:99:94:3d:73:39:75:df:c9:5d:
68:92:fa:1c:0b:93:88:53:42:dd:98:18:98:7f:31:
0d:5f:9e:85:4f:fa:a5:ee:61:de:d4:a8:dc:ba:7c:
2f:f0:c0:7c:db:f7:10:3f:62:8c:ce:b1:3c:e9:11:
14:31:55:2f:2c:42:ff:ad:a2:95:e3:28:c9:c0:51:
e7:a3:81:17:cd:11:ed:70:7b:17:58:89:73:d9:ac:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/21
45.84.112.0/22
91.221.92.0/23
91.221.106.0/23
185.48.132.0/22
185.49.123.0/24
185.56.176.0/22
185.74.52.0/22
194.117.246.0/23
IPv6:
2001:67c:184c::/48
2a00:4780::/32
2a02:5520::/32
2a0e:ac80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35600
Signature Algorithm: sha256WithRSAEncryption
4a:9c:8d:74:f3:8c:0d:af:5a:30:e2:a0:fb:0b:c0:89:55:07:
32:0e:e8:4c:dd:b4:21:76:87:c9:0d:a4:16:b1:35:26:bf:f0:
97:9e:23:6f:6e:17:f2:ae:67:16:bc:c6:b3:e7:e5:8d:94:6a:
7a:c8:8c:74:ec:a0:9e:80:71:86:9e:ff:8a:b9:3f:35:3a:28:
45:89:02:2a:14:b8:68:4d:a8:2f:fe:83:80:0a:ab:bc:ac:37:
f7:46:00:01:2d:f5:92:ea:b5:e3:dc:31:76:65:b7:82:be:5a:
85:8f:1c:48:a4:c5:b2:32:86:0c:c7:35:f0:37:5c:48:79:bd:
08:4d:d4:3b:25:b6:1e:b3:73:32:ba:e0:99:06:24:8d:91:86:
31:17:70:b6:6d:69:c1:61:f5:92:24:d2:74:f6:85:41:51:d2:
66:9a:08:2e:d6:97:23:f1:f8:64:6a:c6:75:67:76:48:e7:33:
ae:de:a2:18:1d:de:b2:99:40:9a:9c:4e:db:e8:3e:41:f9:4f:
7a:c0:08:90:24:73:ba:23:d0:6c:0f:02:d1:00:1c:45:77:95:
b2:24:05:44:d0:1c:ac:9f:ef:9c:bc:40:f6:42:50:62:32:7e:
7c:a6:ad:01:40:51:32:41:d9:3a:9b:ff:5a:df:1a:4f:a1:fc:
3e:0d:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:42:40 2024 by rpki-client on console-fra.rpki-client.org