Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer (raw, json)
Hash identifier: jFF7xdLXYWkPiMjJSr/8Wdzbgl6Gp8YIbpFjVudUA6s=
Subject key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC91890FE11E41503DE46D2D87A6BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57970
IP: 37.152.128.0/19
IP: 185.20.192.0/22
IP: 185.86.72.0/22
IP: 185.88.0.0/22
IP: 2a00:a340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:91:89:0f:e1:1e:41:50:3d:e4:6d:2d:87:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:28:78:91:75:7d:f6:30:90:66:fc:81:c8:
b7:9f:c3:52:61:b6:8b:50:33:1f:86:6d:ab:6c:17:
27:1d:89:a3:64:16:b8:3f:96:07:59:ee:a5:68:74:
ab:04:86:02:94:83:b7:65:8c:42:94:f1:ac:a5:6b:
b1:e2:37:dc:d4:f1:cd:bb:11:47:66:f9:89:22:d0:
6f:5f:45:43:3f:c5:3b:ba:c5:44:d4:bf:50:39:07:
19:e9:28:18:d8:0d:5d:21:57:ad:2f:cf:eb:ff:7a:
29:23:9e:4b:6f:f0:ac:9a:84:61:7c:f1:63:d5:27:
44:62:27:15:63:72:5f:ba:17:97:12:4c:d2:a5:b4:
a4:e5:2b:49:6f:af:23:47:86:8a:de:76:f5:94:3e:
67:d0:a2:d5:fe:f9:fe:0e:68:0e:d2:65:3a:27:94:
0b:24:c1:35:64:4b:c0:75:da:07:f4:9d:ea:4e:d6:
31:e7:43:92:a2:d0:51:d5:11:38:8a:90:f7:c9:e7:
98:7c:17:90:2a:4c:00:da:f5:f8:86:f6:b9:d6:d0:
9e:dc:23:39:45:7f:bf:b7:55:17:06:34:c9:1f:1a:
63:75:33:9e:c8:88:32:3e:af:90:ef:ae:d3:31:8b:
12:50:37:1d:3b:82:08:8e:81:8f:fc:9c:a5:98:a2:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.128.0/19
185.20.192.0/22
185.86.72.0/22
185.88.0.0/22
IPv6:
2a00:a340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57970
Signature Algorithm: sha256WithRSAEncryption
8a:66:a6:13:29:dc:c9:ea:20:d4:f2:59:f4:a8:e5:9b:8b:62:
6f:bc:e4:98:31:57:2e:5a:56:e8:41:14:90:fe:28:a8:cb:7d:
94:37:6b:92:8f:9d:e2:1e:7c:e2:b8:26:e1:9b:79:ae:1e:38:
b8:b8:a8:cb:9a:19:1d:1e:5a:67:d1:1b:ad:14:c6:8b:ed:8b:
bd:c2:d2:4a:14:ad:2b:1f:6e:5f:7e:73:5b:3b:f0:a4:1f:c8:
c1:16:63:28:8d:15:c2:ae:4f:9e:40:28:45:46:4f:13:eb:05:
88:dc:47:d4:04:ac:18:87:02:14:e9:1b:be:17:9e:d9:fe:6b:
63:3d:f7:c3:78:05:6c:c2:ca:8d:09:a9:78:4b:7e:4e:3a:02:
5f:e7:78:c0:f1:2c:42:be:b8:42:76:aa:a0:89:2e:b4:9a:5a:
77:95:8d:19:ef:5f:9b:7f:75:c9:69:fe:33:8d:de:ae:e3:1f:
e7:f0:a9:68:62:04:c1:32:d9:ea:76:78:56:15:c2:e7:07:53:
5b:ea:89:54:c1:39:a6:9c:48:7a:64:37:5f:ca:38:38:c4:0e:
15:96:bf:51:9b:aa:b9:89:a5:58:79:dc:0a:0a:4a:0c:be:34:
bc:07:cf:c1:f3:2b:98:80:84:de:a6:be:62:e7:4d:27:db:b6:
76:8f:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:25 2024 by rpki-client on console-fra.rpki-client.org