Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.cer (raw, json)
Hash identifier: JhFVbetr8oCxPVOe65dIB3ln+5pyuRy8SktLS+efPbY=
Subject key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED0CEF844B5BF78D5F6B60556B4B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203600
IP: 89.47.236.0/22
IP: 185.129.28.0/22
IP: 188.215.56.0/21
IP: 188.215.104.0/22
IP: 2a06:e540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d0:ce:f8:44:b5:bf:78:d5:f6:b6:05:56:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:66:e6:ae:53:88:15:01:5a:d1:fa:e3:80:
65:01:fc:5c:2f:8f:27:ce:16:db:2f:f5:ae:ee:3a:
3a:32:fc:94:75:70:52:d2:92:95:9a:7c:74:a8:a1:
99:c2:23:33:16:26:48:f8:df:ce:41:6f:f7:68:91:
52:c3:9d:13:0e:f7:2d:49:96:88:53:cc:05:e6:f1:
fe:9f:10:bd:ec:c9:5d:65:5f:d0:b2:43:76:af:0c:
de:9e:33:48:91:cb:58:4a:55:f1:08:0c:cb:cc:49:
a2:14:ed:56:9c:78:0c:90:64:e0:25:ba:24:56:76:
d1:85:fa:8f:33:24:cc:14:3d:61:00:93:f9:09:83:
e0:4d:98:30:90:af:24:df:0c:59:81:6f:da:ea:1d:
40:2e:af:6f:8a:7f:13:9a:97:5a:e4:8c:e6:4b:c7:
e7:47:0c:ef:5f:e4:c2:7b:f3:23:3c:75:f6:83:f8:
3b:b1:77:ef:58:00:23:41:30:16:e6:91:bb:e7:b2:
b1:df:25:e9:51:5e:a2:6f:a2:55:69:5d:6d:97:5f:
30:2c:70:68:f4:d2:a1:f6:1a:9b:9e:3c:3a:5a:70:
0c:38:a0:87:5a:7b:03:65:c8:df:0f:d6:b8:df:e9:
51:01:d1:39:8f:00:78:96:09:56:4f:ad:c9:4b:f2:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.236.0/22
185.129.28.0/22
188.215.56.0/21
188.215.104.0/22
IPv6:
2a06:e540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203600
Signature Algorithm: sha256WithRSAEncryption
17:e2:8a:e1:4e:a5:56:36:19:2a:5a:53:c1:49:5f:65:d8:57:
6a:fe:3e:85:f9:62:46:44:fa:a5:81:fa:2f:39:be:3e:42:c0:
5d:8c:f5:df:2d:58:bb:8f:c6:66:b0:a4:55:37:5a:69:3d:f6:
af:e6:92:97:a7:33:35:f4:ae:25:8e:b4:ee:86:66:5f:6a:07:
8e:b3:b6:4d:42:c4:cf:6b:26:d8:a4:5e:f9:a9:79:e8:34:27:
99:f2:a8:4d:f0:f4:94:15:41:47:51:a3:65:a9:72:3d:cf:eb:
da:51:bc:b8:d9:88:87:3a:05:9e:90:d6:49:4f:db:28:96:8c:
ba:fb:89:d4:d5:4a:fc:92:e8:ef:12:51:32:76:22:01:05:8b:
fc:b8:f1:4c:2f:e9:7c:0a:1d:b2:02:c8:16:c7:9d:91:67:3b:
4e:90:10:97:dc:b8:9b:7b:72:8c:39:01:85:3b:89:7a:a8:18:
2c:ed:98:62:d1:1d:15:0d:32:17:02:9c:34:94:fe:61:06:02:
96:20:05:78:bd:7e:15:12:de:8a:85:92:11:21:b1:d5:50:83:
74:78:7d:83:78:51:9d:d2:c7:b2:05:68:db:4d:11:f8:61:e6:
c7:d6:62:45:0c:42:73:ed:2d:55:c5:0f:73:ee:12:49:a2:40:
f7:55:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:30:19 2024 by rpki-client on console-ams.rpki-client.org