Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NueQ6orGRchQZHRaQgw9hb3XXmM.cer
File: NueQ6orGRchQZHRaQgw9hb3XXmM.cer (raw, json)
Hash identifier: Mjg1TfkG1xGRwZgyFXT2/nwJwlL+ftrPGy/cUVxJN1g=
Subject key identifier: 36:E7:90:EA:8A:C6:45:C8:50:64:74:5A:42:0C:3D:85:BD:D7:5E:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D849682EA1EDAF7C0E7693DC3733A8398
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/c02ebc-dfec-4b0f-803c-c33634a61d20/1/NueQ6orGRchQZHRaQgw9hb3XXmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/c02ebc-dfec-4b0f-803c-c33634a61d20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 17:21:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.81.108.0/22
IP: 2a0e:5580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:96:82:ea:1e:da:f7:c0:e7:69:3d:c3:73:3a:83:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 17:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36e790ea8ac645c85064745a420c3d85bdd75e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:88:e6:ca:eb:59:b7:aa:29:2c:c1:e2:4b:
9f:0a:c7:af:08:4b:06:d6:11:1a:38:93:8a:44:9b:
ac:de:da:04:3d:ff:9d:7e:32:93:d7:a3:96:5f:05:
16:d3:c4:0c:f5:41:16:24:1f:5f:cd:8f:56:f7:73:
9c:9b:a3:3b:d1:63:57:86:4c:b2:25:65:d2:bb:37:
63:c7:32:e7:78:a2:bc:3a:57:b6:f3:c9:27:49:b5:
1b:d7:33:1e:50:d9:b8:6d:40:46:f0:01:cc:79:7f:
36:34:41:66:54:88:2c:29:e9:27:12:69:ae:cf:c8:
c5:dc:69:6a:73:e4:17:ae:89:21:73:77:0a:5d:5b:
00:07:d3:86:24:91:71:ad:3e:06:31:03:f6:11:9c:
06:78:11:95:ef:22:4a:eb:57:34:cc:d6:a8:dc:f3:
0d:d1:1f:09:dc:d0:c0:3d:2c:43:cf:fc:f0:2b:a1:
eb:47:d2:07:7f:18:d2:97:66:db:9b:a2:52:ca:33:
13:6b:a5:37:9b:74:0a:4e:09:35:06:05:58:2e:df:
8e:2b:e4:59:d2:0f:42:98:80:b1:a1:0d:04:5d:2e:
c4:ea:70:54:7e:7e:ef:2e:9c:27:62:50:0d:3b:78:
e3:96:6c:16:2b:e2:ef:9b:75:82:f7:4b:2c:b6:99:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:90:EA:8A:C6:45:C8:50:64:74:5A:42:0C:3D:85:BD:D7:5E:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c02ebc-dfec-4b0f-803c-c33634a61d20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c02ebc-dfec-4b0f-803c-c33634a61d20/1/NueQ6orGRchQZHRaQgw9hb3XXmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.108.0/22
IPv6:
2a0e:5580::/29
Signature Algorithm: sha256WithRSAEncryption
a1:cd:10:aa:2c:29:29:09:b3:a5:d8:25:82:b5:e0:24:03:2a:
ac:60:b2:6c:e2:b6:2b:32:64:0f:f2:92:6a:04:e9:b0:b7:c9:
b1:e4:f7:63:3e:c4:2b:fa:6c:0b:7b:6e:75:80:5c:04:c3:15:
6f:8f:f5:b6:0b:7c:e6:d9:1e:ec:2d:7d:82:1b:86:98:c5:9a:
d6:59:bc:86:28:f4:a7:1a:c8:89:10:b1:10:06:50:4c:41:67:
fd:26:c2:cc:e2:c1:7f:62:67:f6:43:1d:14:50:d3:7a:48:7c:
45:e0:8a:cf:14:40:b2:ee:37:9d:5c:c3:cd:92:29:ae:36:8f:
12:0c:0b:09:50:47:99:d6:53:cb:e4:f6:7f:8b:e1:16:54:bc:
c9:11:7e:3c:3b:f7:90:b6:66:93:1c:64:7d:d6:76:a2:c8:d5:
c3:f1:a3:d2:2c:40:65:4b:bd:68:8b:8d:6b:3c:4a:87:2a:8f:
07:ce:40:32:5c:56:c2:54:38:1e:2b:c2:bc:3d:d3:1e:62:9b:
95:aa:df:72:53:37:7f:d7:c9:d0:9a:df:3a:5e:64:53:53:f6:
19:99:cd:6b:0e:ce:34:ae:b5:7b:e3:16:35:fb:28:4b:3b:20:
27:78:25:32:39:95:3c:2a:72:38:fe:ff:59:8e:4d:6b:a4:ce:
5d:27:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:58:01 2024 by rpki-client on console-ams.rpki-client.org