Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
File: NnBwsWnRGpYpEATjAA-bBNThEtM.cer (raw, json)
Hash identifier: 60EoRqixI5pxANxIJ/2VRaYSSJizSoDk7ri6kL8Sel4=
Subject key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2875237FCE33EDAD5A49478BEA4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202315
IP: 194.49.80.0/22
IP: 2a0c:c8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:28:75:23:7f:ce:33:ed:ad:5a:49:47:8b:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=367070b169d11a96291004e3000f9b04d4e112d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:00:55:95:0d:bf:61:91:40:f6:21:cd:b4:
29:68:cc:b9:f0:71:10:ea:94:77:7a:67:a4:64:dd:
7d:83:53:ca:af:fb:f5:bc:81:ef:cf:0f:37:4c:e5:
18:1f:36:52:af:81:36:62:f7:37:eb:8a:a2:59:21:
4e:e8:94:64:6b:c8:2f:2a:b0:3e:78:1b:d4:08:09:
16:8d:52:84:d2:12:37:8e:da:74:3f:b4:f4:e3:1d:
81:8c:db:9e:92:0a:8f:69:be:ea:51:ee:ff:72:b0:
22:23:e8:54:02:cc:33:36:62:83:d2:a5:f0:60:71:
b5:e6:eb:0e:12:2a:2e:7a:ba:5a:51:f0:5f:3c:12:
d7:8a:38:b0:0f:b3:41:7b:00:ee:70:d9:20:5c:0f:
43:b5:a6:29:2c:57:1d:55:8a:f7:f4:41:57:b4:28:
85:22:0d:29:89:41:c4:d6:cc:27:4b:54:ac:d3:75:
97:b9:c1:5e:12:ed:98:76:e4:79:70:aa:7c:1b:07:
c1:4b:2e:b7:99:11:da:f7:8b:66:d8:f7:97:aa:bc:
4c:c9:e4:5c:eb:a8:f5:98:fb:fb:88:54:c0:40:d9:
85:cf:5a:d7:e7:67:5c:50:cf:b0:4b:11:53:b1:ed:
33:c8:b5:70:1d:ca:b9:e6:f3:33:21:f4:d2:c2:20:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.80.0/22
IPv6:
2a0c:c8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202315
Signature Algorithm: sha256WithRSAEncryption
a4:a4:e4:53:29:34:be:3b:d7:f1:f5:8a:9b:1d:df:9f:46:d3:
65:76:cf:33:5a:5f:22:d9:22:1d:5c:bb:ba:59:67:df:bb:7a:
92:7b:58:7e:73:62:a9:42:52:9b:95:df:a5:b6:95:ed:1a:e1:
f3:c9:a5:5d:ac:fe:b5:0e:dc:08:87:c1:cb:7c:7e:f3:53:6b:
e4:5b:e0:be:61:2c:fa:8a:69:1c:eb:56:ae:ba:f1:33:80:37:
76:da:6a:5d:ae:7e:1c:e7:5f:1c:1b:3f:39:9a:e1:e4:2e:71:
0b:f4:73:93:95:df:52:9d:92:42:e8:85:90:09:4e:7b:af:40:
89:c5:8e:0b:73:c7:f4:ec:fa:ca:88:eb:d6:bd:0a:19:45:db:
81:1b:d8:e3:42:6a:23:f5:ff:b0:58:09:6d:75:04:26:09:ef:
cf:1a:10:47:5a:fb:44:2d:e2:6d:7e:2d:c8:37:42:ee:de:bc:
ee:fc:7f:72:1e:64:a0:a9:e5:89:16:0e:b2:cd:d5:c6:86:23:
d4:d1:eb:72:09:98:16:d6:c9:cc:f9:87:90:1d:6e:1e:95:61:
22:2b:81:51:25:0f:b6:11:46:3f:69:97:43:b8:c0:b5:2f:d8:
e1:f1:1b:01:97:7c:6f:e6:0d:71:4a:45:22:b7:2d:79:f8:3c:
f6:1e:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:39 2024 by rpki-client on console-ams.rpki-client.org