Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
File: NhrfV8jct7_TTprs2D42NC7Do8k.cer (raw, json)
Hash identifier: PYe5gK09eoS7vHRMKxnXuqNLuIUtRZM7OFn/77AA+O4=
Subject key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794F936640E5B4DD090A5CD3AD7908A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198812
IP: 91.239.147.0/24
IP: 2001:67c:1240::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f9:36:64:0e:5b:4d:d0:90:a5:cd:3a:d7:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:4f:2b:e0:23:4f:5f:cd:a0:84:3e:4b:85:
c2:4a:6a:7e:60:02:7c:ab:cc:8d:94:b6:1e:32:18:
93:f6:96:61:40:cd:95:3b:e7:07:fc:52:b5:86:5d:
97:49:24:19:4f:bc:9e:35:b5:5e:36:0c:7f:19:78:
e8:c4:83:67:62:db:e1:b3:8e:77:16:43:cb:6c:9b:
a6:11:94:5d:d2:f6:2b:02:98:57:39:e4:fd:9e:57:
08:47:54:ed:2f:78:b6:0d:12:d1:fc:37:16:7c:51:
4c:a4:21:76:b1:1d:47:b5:8c:1d:a4:48:d6:77:68:
67:55:01:51:5e:ef:36:4b:a2:0c:b1:70:ae:ce:64:
e4:77:b2:41:b4:1e:82:a4:73:9d:d9:7f:c5:4e:25:
6d:ea:91:16:38:e5:06:36:ca:d4:36:04:28:ee:0f:
e0:a1:aa:58:00:f2:65:8e:ca:44:15:06:23:99:38:
1d:03:f0:15:94:ed:09:94:a5:27:df:f2:b6:b1:a8:
36:89:89:dd:2b:36:d1:91:6a:c5:cd:72:1a:09:23:
3a:8a:68:60:30:42:6c:2a:fc:2e:98:2f:c6:ab:7d:
9f:94:3c:e1:28:61:ba:4c:d3:0b:89:0d:d7:a5:d9:
c0:f2:2b:92:28:e2:6b:12:05:b6:13:23:d6:50:cd:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198812
Signature Algorithm: sha256WithRSAEncryption
45:38:a0:75:30:c6:95:00:ab:d6:4a:bf:4e:94:0f:36:6d:bb:
56:a1:97:64:37:37:e5:27:a4:e9:ab:8b:fa:4f:01:f8:06:0f:
ca:07:1b:7e:49:20:9c:25:8d:86:17:9a:0b:70:49:18:b8:bb:
3b:5a:01:e2:03:6f:f0:45:3a:37:95:ac:9d:a7:0f:76:f3:71:
93:04:d4:7b:7b:b9:38:fe:9c:ce:31:46:f1:5c:99:e4:38:44:
fe:ab:16:d4:a4:b6:5d:6c:0f:04:ff:71:19:79:92:b0:7b:e9:
59:e4:65:f5:36:fb:47:a5:66:f3:74:0b:3f:a0:de:43:f7:bc:
45:ce:6c:68:d8:d3:26:48:c5:97:92:a8:cb:40:2f:0c:cc:a1:
4f:15:9e:62:e7:f4:28:fe:f8:23:cb:22:d2:b3:8e:0e:06:27:
cb:62:56:79:12:a5:ad:c7:d1:07:dc:be:61:33:07:ba:44:0d:
27:2e:95:27:ff:83:ae:2e:03:e8:6b:58:78:85:47:b3:a7:4e:
13:49:c6:49:76:db:a4:ff:aa:4d:82:3f:79:b8:f5:c0:be:65:
fd:71:6e:0a:74:d8:9c:82:bd:37:43:db:59:67:c2:c5:a3:39:
05:61:ff:d1:e5:af:95:99:8d:7a:d0:6f:1f:ad:a7:ef:4d:15:
0b:fe:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:11:34 2024 by rpki-client on console-fra.rpki-client.org