Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
File: Nia55ERl8L1xPAoeBQED05EdzWc.cer (raw, json)
Hash identifier: PHKeqFOye53HIP1MfEEENxuzPsbYJbsbcj+iGT16mUE=
Subject key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72695D113C6F0C6CC74FD5F89E230A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.116.62.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:95:d1:13:c6:f0:c6:cc:74:fd:5f:89:e2:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:fc:38:23:c9:c9:aa:a2:1e:4e:0a:f8:fa:
e3:9e:e7:84:0e:61:af:83:8f:2c:d1:25:26:1a:c4:
e9:f5:c2:57:a7:be:a5:ad:2c:09:aa:2e:36:22:ae:
44:d2:ca:51:d6:5a:85:60:a2:65:95:42:d2:38:2a:
54:6b:f9:44:b4:f0:db:1a:81:f3:df:f8:22:7d:61:
a8:bb:ea:6f:5a:df:60:d9:c0:ab:aa:a6:6d:20:da:
12:3f:1e:28:c6:22:f1:71:c3:18:59:53:8e:26:39:
3d:34:9b:4a:ff:92:50:45:4a:84:29:3f:52:75:53:
32:14:24:52:7e:a8:bb:66:e5:38:aa:9c:c3:c5:7a:
42:13:7a:d0:a3:23:bb:ed:d6:f1:f7:66:66:2b:9d:
b5:c3:0d:6f:8f:0c:f1:08:18:d2:1a:41:46:c2:1c:
81:9b:49:2a:e3:df:01:0c:bf:df:5e:d2:e4:4d:23:
1e:d8:25:fb:97:9e:0f:7b:23:90:23:97:95:8b:f7:
77:aa:88:ea:17:b4:72:25:d4:ef:3d:59:69:fe:3d:
ef:a2:94:c1:65:16:1c:c5:24:d9:cb:77:25:13:a0:
40:25:40:25:64:9c:30:c9:09:cd:40:bc:a9:f4:2d:
09:70:90:bf:2b:cb:f9:9c:9e:9f:7c:01:49:b1:29:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.62.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:4b:1d:62:41:17:71:7a:dc:d5:b9:c0:e7:d0:4b:ff:8f:
36:42:9e:75:29:84:a9:e5:a2:8e:78:fe:31:87:49:a9:c3:36:
2a:5f:78:9b:46:4d:bd:0a:93:c0:83:81:7c:30:d4:25:48:f9:
89:e4:a8:36:82:52:f8:97:b3:8f:fa:50:c6:cb:f9:f6:0e:3e:
15:15:09:d6:a6:d6:44:88:57:25:75:19:27:9a:3b:11:07:6c:
b7:b8:51:8f:a5:a7:05:08:dc:a6:b9:23:03:16:be:21:eb:fd:
06:75:8d:2f:5a:56:92:d7:24:80:37:c2:6c:16:a0:55:0e:5b:
6e:07:56:cd:71:0f:4f:97:e0:2b:27:04:02:d1:ef:39:07:75:
a7:52:65:9e:4e:0a:45:f1:c6:5b:bf:56:11:64:13:5c:95:bc:
04:87:34:db:40:f6:00:18:52:35:22:10:a8:58:63:55:5f:9a:
ec:d5:24:e5:10:57:a5:fa:71:8f:1e:d6:6f:24:7a:4f:7d:c1:
5c:fb:1c:fb:4d:4e:2b:5d:31:a7:6f:92:1c:67:6f:f9:fd:a0:
e9:c3:c1:00:4c:52:70:3d:3d:7b:82:c1:dd:29:8f:4b:83:42:
89:c3:aa:a7:53:1f:08:07:3a:fe:7b:54:af:8c:0e:c3:23:39:
61:9a:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:38 2024 by rpki-client on console-fra.rpki-client.org