Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
File: NdhRwRSj93nqgCV7HuGCas2uSk4.cer (raw, json)
Hash identifier: yWeV5GLlhaO6yg4rDkQ3KzdfQwN2mF28lCIQQohYhrM=
Subject key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B925A7F9DD71031442B06016C0B598
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42143
IP: 185.207.52.0/22
IP: 2a0b:1e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:25:a7:f9:dd:71:03:14:42:b0:60:16:c0:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:00:18:29:0c:66:38:93:6f:6d:25:02:72:
a9:2f:dc:aa:8b:2c:ea:13:29:2d:b7:ec:dc:73:ed:
9a:a2:b9:61:26:3d:90:e8:d9:13:3e:83:44:82:af:
f9:2a:65:54:3c:5b:85:1e:a3:ee:2f:33:8e:bb:34:
b6:f3:bd:52:fc:9f:50:e6:0c:de:c0:97:7c:87:c0:
84:39:bc:d8:4a:7a:8e:69:ff:fa:cd:7e:f3:a3:4e:
c2:68:5f:c0:ef:4d:87:f6:c2:e6:e7:b6:a0:8f:3e:
7a:23:60:9f:c8:f9:48:56:73:dc:c1:f1:82:3f:cc:
83:d9:d0:82:a1:31:a9:60:00:98:fb:e6:db:b7:31:
5c:ec:be:79:9a:4e:1c:e4:d3:3d:bc:b6:97:69:68:
39:11:a1:d1:e4:2b:d4:ee:63:fe:b5:6a:12:24:75:
66:db:fc:84:f7:08:6c:a9:fd:aa:c0:bb:27:bb:c0:
80:4d:3c:d0:cd:00:8a:67:75:dd:43:8a:8e:57:a2:
56:f7:46:42:5a:24:70:91:ad:83:f0:64:9b:32:67:
57:c0:18:70:69:c4:cb:5a:18:9c:67:55:34:a9:c2:
aa:f8:0e:cf:5e:4d:d5:34:d1:2e:7b:f8:52:45:60:
98:b5:27:13:e7:b6:42:5a:cc:87:ff:a1:0f:ec:ec:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.52.0/22
IPv6:
2a0b:1e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42143
Signature Algorithm: sha256WithRSAEncryption
6f:59:4a:2d:aa:80:27:ab:76:89:b8:cb:ba:d2:98:aa:fc:70:
ca:a3:34:3b:97:0e:60:d2:0c:2b:ed:78:c9:a5:36:97:0e:af:
45:8a:18:da:d4:dd:14:d6:99:be:6c:00:10:cb:44:bf:62:ad:
21:ba:4f:07:46:08:00:ae:b6:cb:bb:dc:ba:29:62:26:84:31:
0a:d0:72:52:4b:07:95:1f:6c:8e:7d:d9:34:12:2b:6f:65:6e:
56:b3:51:7c:fa:c2:1a:33:d1:f3:cd:1f:0e:bd:d7:ef:ce:16:
69:a0:5d:d7:82:e7:57:2d:0f:f0:92:2d:a1:d4:ad:40:1f:8a:
57:a5:8c:23:c2:32:64:1f:47:ee:56:60:0d:4b:6f:f0:21:2d:
a9:05:8e:89:7b:f2:1e:80:a2:4a:34:48:31:aa:e4:7e:71:37:
8e:37:49:a5:0f:1a:0b:f3:9a:7b:5a:83:63:40:c2:e4:06:06:
ac:57:e8:97:c1:94:97:3d:d5:c5:b6:be:5a:ae:d5:1d:79:d6:
20:49:68:6f:48:97:1f:4e:24:9d:5f:f1:76:62:4d:ab:92:16:
fd:ff:bb:9e:ac:71:f1:7e:d5:54:2b:d4:70:d2:f6:95:84:65:
c0:7c:24:2b:b3:e1:a7:df:ed:43:97:f2:d4:0e:9b:d7:9c:77:
13:e4:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:11 2024 by rpki-client on console-fra.rpki-client.org