Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer (raw, json)
Hash identifier: khYrziX8l4NVSDmScPKWUap/4oCcm8UI+C4pxLfSvb8=
Subject key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490BF46E89EF209D8E53ABBD82B2D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201527
AS: 204145
IP: 45.130.220.0/22
IP: 45.157.196.0/22
IP: 89.35.179.0/24
IP: 185.50.72.0/22
IP: 185.113.64.0/22
IP: 185.194.204.0/22
IP: 2a01:a060::/32
IP: 2a02:7400::/32
IP: 2a0a:50c0::/29
IP: 2a0e:5840::/29
IP: 2a0f:a2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0b:f4:6e:89:ef:20:9d:8e:53:ab:bd:82:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:9e:a5:b7:e2:dc:dc:22:c9:94:98:87:34:
28:2e:8f:4c:f1:dd:43:1c:88:7c:56:4d:58:08:a4:
4f:7b:4b:4b:a6:4e:c2:da:bb:e1:61:97:d5:af:61:
5e:dc:5e:1a:96:f2:ba:45:13:c9:b0:9c:35:33:1f:
76:a2:84:82:57:19:a9:92:5f:83:ac:03:f8:47:5b:
f3:3f:de:46:ed:c6:fd:1b:84:aa:ad:2d:85:6b:da:
c3:60:6e:89:1d:ec:5d:0a:06:a0:e8:c2:12:9d:4e:
94:1c:66:a3:77:dc:b3:a2:94:fd:01:0e:18:f5:89:
f6:64:1c:ba:9a:6f:46:29:f2:d7:9e:47:15:48:f2:
94:d3:3a:5f:ce:c1:c3:1d:d5:e0:e3:e1:0d:d8:de:
44:c7:55:fd:77:6b:e5:f3:46:be:c5:e6:8a:a4:c0:
a8:72:4d:16:55:55:99:84:67:ba:ad:f1:6f:e2:bf:
bd:72:e3:11:c6:f4:3f:2d:2f:b4:c1:4a:c1:32:cd:
be:8c:c1:f2:16:4e:ab:e1:6f:b6:5d:2f:69:de:6d:
5c:d8:c9:88:6c:05:6d:37:2e:46:08:36:36:a0:34:
c6:69:37:d0:a5:a8:45:9b:22:fe:65:34:04:82:9d:
a6:b5:f7:19:14:a2:6c:9e:e5:1f:a9:03:14:2d:b2:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.220.0/22
45.157.196.0/22
89.35.179.0/24
185.50.72.0/22
185.113.64.0/22
185.194.204.0/22
IPv6:
2a01:a060::/32
2a02:7400::/32
2a0a:50c0::/29
2a0e:5840::/29
2a0f:a2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201527
204145
Signature Algorithm: sha256WithRSAEncryption
6b:18:ef:c4:d5:5b:7e:7b:2d:76:9d:23:cf:87:3c:99:06:77:
65:66:11:6e:bb:b0:8e:24:ee:ff:e1:9d:b0:2d:52:43:cb:d0:
3f:e7:18:45:c0:14:67:4e:7d:53:fb:93:d1:b2:3b:d0:db:9c:
6b:ae:60:35:2e:e2:ef:5c:48:64:d3:bd:ac:91:f6:b3:30:49:
fb:49:1b:e1:66:3e:4d:73:5c:f7:3a:f6:73:2e:a0:20:f9:8d:
b7:15:cc:27:38:e3:94:ab:cc:c9:14:20:1f:7b:36:26:9c:2f:
42:aa:bf:01:72:f6:ee:37:32:70:b4:ef:fd:5c:9b:67:9b:e3:
00:92:d0:93:ec:6f:74:08:28:b7:cc:83:68:2b:03:bb:41:12:
05:cf:25:10:3f:58:32:0a:34:96:84:f4:5b:97:f9:19:da:b3:
7d:aa:5f:6f:66:32:0a:30:4c:fa:c8:a5:93:7c:60:e7:8d:58:
b5:72:42:4c:27:39:81:d6:eb:ad:3c:13:4c:43:d0:c8:0e:f0:
b4:06:19:a8:71:11:fc:07:11:37:de:1d:f9:ba:e3:b0:96:2e:
41:18:cb:ec:b2:7b:15:98:82:5a:98:7d:05:62:c3:a2:59:f4:
89:a1:2e:3e:cb:01:7c:09:06:fe:ed:87:31:6e:7d:d1:8d:a1:
5a:79:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:30:26 2024 by rpki-client on console-ams.rpki-client.org