Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
File: NgHDzOanHKshpLut8KuE3ePyurI.cer (raw, json)
Hash identifier: bp0yddWNi8WjHh/fCD6mUWAc3xixW2buNU3XgIZnJHk=
Subject key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E1D5A6A206FD63A1622D8949E23D465EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Mar 2024 09:17:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52143
IP: 188.94.0.0/22
IP: 2a02:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:5a:6a:20:6f:d6:3a:16:22:d8:94:9e:23:d4:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 09:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:ca:b1:3d:b0:87:47:4e:8d:31:b8:97:98:
e6:0f:6f:b3:3e:41:fb:60:58:32:ff:f7:9f:6b:60:
10:5a:17:6a:7b:31:ae:b2:55:a3:57:a1:66:d6:3e:
db:a7:fa:5d:0d:b1:49:54:09:6c:6c:f1:23:02:42:
29:1e:8f:76:78:dc:02:80:6d:d5:14:db:10:26:26:
85:43:0b:bb:bd:51:97:ff:82:91:89:04:7e:a7:d0:
af:6d:b0:3b:cf:72:24:dc:02:66:6e:9a:03:04:73:
b1:fb:38:c2:9a:37:ba:c0:a1:06:f7:74:58:89:41:
80:bc:6f:91:1f:1f:44:6e:f5:a9:30:87:ac:a3:e1:
7f:6d:0a:f4:c3:5a:bb:47:69:a5:f9:9c:5d:e4:52:
8d:f4:bd:65:84:4e:16:b9:fd:2e:6d:39:76:27:78:
c0:67:5d:5f:fe:96:ee:ef:b7:70:d2:6a:49:31:44:
9a:45:b6:b6:61:48:3a:8c:84:c8:b1:46:cb:0c:2d:
87:b0:df:00:aa:1f:c8:00:19:3a:c0:b6:b1:3d:a4:
b3:af:43:aa:81:81:32:08:2c:dc:78:26:65:c8:b9:
a7:df:77:95:cf:96:78:c1:ed:19:a2:4b:7b:8e:49:
58:7b:5e:2f:92:47:2d:ea:18:25:0d:01:b8:d2:f6:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/22
IPv6:
2a02:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52143
Signature Algorithm: sha256WithRSAEncryption
5e:10:67:a0:77:c4:48:ee:3e:85:3c:64:a3:37:88:9a:b3:32:
e4:59:fe:10:a4:b3:d9:ba:93:4b:87:18:39:d6:e4:7a:1f:7f:
43:15:86:cb:9b:90:4d:9f:d1:9b:83:56:f8:31:6b:62:48:e5:
c1:64:4d:7c:78:57:c8:2d:a5:ba:fb:61:d4:67:69:78:b1:95:
e0:54:03:25:de:b3:f1:24:1b:62:7d:25:02:62:13:61:9e:78:
ce:35:15:1e:c5:a4:2e:e6:76:de:55:53:b5:ee:d1:c6:d2:2b:
7d:f2:df:95:50:79:50:5d:9d:99:d8:66:5a:e0:0e:b1:63:b8:
e2:39:c7:ab:1c:c3:67:45:aa:ee:97:4c:ff:34:0d:04:73:d8:
ba:19:26:e8:c8:a9:f9:41:2a:c2:89:62:3d:e6:df:c5:0b:67:
5a:98:f4:2c:e6:e1:99:14:48:75:5e:81:f2:12:66:84:34:7b:
79:2a:24:21:12:d5:25:e6:5c:09:6c:33:c2:de:9e:29:d7:5b:
28:ac:0d:2c:e2:23:62:fa:1c:10:5f:1d:f6:60:d9:f0:49:98:
bd:2e:d7:e0:87:f8:82:8e:f8:b6:86:9b:60:1b:02:da:06:65:
d9:75:3a:40:53:ee:90:cc:ec:d3:e1:b2:60:bd:69:0c:ae:49:
e8:a7:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:35 2024 by rpki-client on console-fra.rpki-client.org