Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.cer (raw, json)
Hash identifier: Qp9w8Ao9AURJjG/ZEXcSMkbH9qmymT6/d4NMJeq9mz4=
Subject key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F948A3566DEF60AFBC8C0F345B6BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29367
IP: 193.102.174.0/24
IP: 193.103.129.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:94:8a:35:66:de:f6:0a:fb:c8:c0:f3:45:b6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:96:c5:b9:91:77:5c:34:8c:c1:9e:c8:81:
49:4f:9e:cf:15:9f:26:d2:da:4b:00:f3:26:3e:40:
c3:7a:56:6c:01:17:71:5c:9e:d9:5b:9a:7b:9f:96:
01:05:a4:16:c8:71:14:56:28:f9:04:1f:3e:ec:f4:
13:e9:5c:89:3b:3a:c5:7c:9a:c7:80:10:89:f6:65:
18:68:8a:77:62:05:f0:be:9f:ec:f4:c5:df:08:2c:
35:72:00:88:03:e3:65:b0:b6:c5:ee:44:6c:c1:90:
89:98:f2:99:89:ee:07:b3:4c:1b:dc:31:db:57:f2:
82:2c:51:3e:6f:03:90:a7:eb:e6:4c:87:92:fd:b2:
67:92:64:b6:d4:77:37:49:92:78:1f:19:f6:cd:63:
9f:d7:37:5a:a1:ff:99:38:23:ec:a8:bc:30:37:6a:
19:a7:b3:de:fd:5a:15:49:9e:0a:38:ae:78:e8:20:
cf:b0:95:62:95:84:72:e5:5a:b9:c8:94:38:98:61:
91:76:08:60:aa:77:b7:17:b1:a9:dc:ad:ea:67:8e:
48:f8:75:d4:f3:44:a5:cd:e3:20:12:4f:e5:5b:1d:
09:f8:6e:98:fb:87:0b:ac:18:82:85:42:1d:bc:2f:
96:65:1a:12:07:ec:4f:8f:3d:a2:e2:7f:97:16:44:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.174.0/24
193.103.129.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29367
Signature Algorithm: sha256WithRSAEncryption
2f:b9:da:53:d2:ba:36:c9:d5:21:84:48:4b:0e:15:fa:43:33:
95:c9:5f:46:34:53:b0:22:2d:cb:ab:c6:67:53:9f:95:e0:51:
26:89:99:0f:60:fb:48:fd:4a:9f:52:1c:27:57:16:26:11:6d:
77:c8:73:77:7c:4b:63:12:1c:51:4a:7d:44:86:70:32:bf:99:
fb:a5:da:b8:51:27:dc:be:85:24:6c:6e:b8:7e:e4:8c:79:63:
13:80:7e:8c:58:99:d9:95:15:4b:9d:9b:90:fa:64:55:e6:ff:
89:b6:c1:31:d3:cf:61:af:f9:8b:87:53:8e:cb:c1:86:4f:e6:
23:b2:38:71:fc:bb:9e:fe:ff:2e:3f:c1:ab:0a:b0:33:84:74:
19:d3:83:2f:68:08:1a:33:ab:39:cc:48:9e:bb:36:43:e4:5d:
1c:c6:33:22:6f:fb:a6:7c:7f:35:28:54:fa:7c:56:6e:07:e5:
83:8c:12:a5:e1:e9:ea:00:c6:b4:07:72:a8:b8:ba:09:49:51:
72:fc:7e:e2:2b:73:0c:61:b1:f5:2d:10:ca:5e:ac:c9:45:1d:
10:ff:8d:7d:37:af:df:f7:3a:96:2d:af:f2:f9:fb:8e:03:eb:
0a:fb:32:41:41:03:0a:b1:27:65:8f:d0:a7:9c:4c:91:f8:bd:
ee:e8:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:47:38 2024 by rpki-client on console-fra.rpki-client.org