Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.cer (raw, json)
Hash identifier: JkkcN97BtFczgPZNgi/Hcitsk5YFSBy7vrsuovFum+I=
Subject key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E18AEE19060C291E2C9EB940FCC07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213338
IP: 185.167.183.0/24
IP: 2a0b:9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:18:ae:e1:90:60:c2:91:e2:c9:eb:94:0f:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:b6:ba:f5:21:e2:64:a5:57:2e:2e:37:e9:
10:b9:63:10:55:63:71:67:01:81:69:8a:fe:d4:04:
07:b3:1e:04:4b:ae:e4:77:08:2d:81:1d:48:37:86:
f3:03:59:1a:ea:19:59:e8:8e:ce:93:a9:8d:6a:e1:
61:a2:22:b6:0a:20:e3:5d:80:44:f1:79:d6:ef:ea:
5f:1f:b7:ca:53:14:e4:8a:57:5f:ae:e4:71:ec:8f:
14:e1:3c:bf:90:ff:9b:27:74:e2:c5:90:04:9f:91:
ab:2c:b2:77:ea:53:60:48:79:b3:ab:ac:87:64:f3:
f6:32:0a:e2:dc:7f:c0:dc:6a:43:08:f0:c4:af:45:
42:fc:e7:45:30:52:1e:6b:b6:b2:f0:4d:80:23:56:
66:d1:91:a6:8a:26:b0:77:ca:42:44:32:66:7c:9d:
6e:ad:62:ac:80:9c:dd:21:a3:d3:3e:0a:c1:88:c7:
6f:16:17:d2:71:9b:19:09:14:65:cf:71:27:e7:9b:
4f:eb:7a:5e:b4:b6:f9:90:bc:98:eb:e6:8c:32:24:
ad:06:dc:9f:42:08:5a:5c:15:fe:b6:9a:cd:cb:68:
aa:b2:ee:c8:1c:23:d4:b2:f9:49:a7:05:25:d9:13:
92:60:2f:7c:72:cb:d9:41:aa:e5:6c:49:23:04:6f:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.183.0/24
IPv6:
2a0b:9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213338
Signature Algorithm: sha256WithRSAEncryption
53:52:ba:ac:54:96:b7:87:21:9f:5b:14:75:dd:36:fd:b3:18:
67:fe:0f:66:68:f3:6c:50:a4:71:09:92:e8:bd:b3:c1:29:36:
7a:65:fd:8d:66:88:2a:21:df:b7:a0:34:bf:7b:9b:d2:c1:f5:
3d:07:b7:e3:5d:5b:34:6b:c1:75:94:97:5e:ab:08:5b:f0:2e:
aa:e4:df:d6:a7:04:27:49:65:57:5a:26:af:cb:b5:32:5c:d6:
5a:10:b7:aa:83:a9:72:b1:3a:fe:e2:a8:28:e0:ac:89:54:4b:
59:a7:28:cc:e2:6e:94:65:de:88:c0:11:71:6e:b6:5f:1e:89:
05:50:4c:fb:a2:b0:6a:a0:55:a5:fa:e1:69:83:fc:27:46:2c:
ca:3e:50:26:4d:b3:7e:c5:25:85:8e:ff:23:39:b9:82:77:00:
38:a2:2e:a4:24:b3:69:c1:11:05:96:e6:f6:99:61:5c:06:00:
c7:b6:31:ea:a3:3a:67:dd:5e:47:25:38:a5:f7:5f:54:84:d5:
e7:7f:42:e4:c7:ee:df:68:b1:78:41:90:90:a2:6d:22:91:90:
3a:a7:aa:88:c8:a3:fb:f2:9c:57:00:e3:46:53:d9:80:15:88:
67:d3:b3:2d:6d:d4:b5:2f:b2:92:70:d0:ae:0a:f5:5b:0f:71:
06:1a:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:35 2024 by rpki-client on console-ams.rpki-client.org