Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
File: NutRbqkC2WStsqptytmh3A9bfv4.cer (raw, json)
Hash identifier: rHahM8rIQPZs23QswpIBg96KE4UaqEzu0stbccG0RdI=
Subject key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488C937C66B94601449FD481D78DD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.233.206.0/23
IP: 2001:678:c30::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:93:7c:66:b9:46:01:44:9f:d4:81:d7:8d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:f7:a4:ef:65:25:fd:b0:9c:ca:af:6a:80:
c7:3a:07:f1:2a:f2:d9:b7:70:67:54:cd:08:a4:f5:
2b:5d:1c:17:b9:f2:2e:74:38:6b:86:43:47:97:68:
4e:5f:0c:47:b6:15:6e:e7:11:52:55:a0:b9:bc:ce:
b6:51:8c:f7:c3:52:33:07:4d:10:41:8b:ce:28:f0:
f5:77:73:f2:e8:f7:e2:a7:17:2c:e3:8f:8b:64:6b:
fd:6d:95:55:ca:b1:d4:65:c4:da:40:69:c7:d7:0e:
6b:1e:cb:5c:03:71:35:4e:c7:e2:55:30:0c:31:59:
a4:2f:ef:28:f5:c0:a0:69:21:b6:fb:23:7d:b0:fa:
cf:30:d8:cb:2c:8c:4b:10:b9:af:1d:71:8d:53:0c:
f1:b9:8e:8f:47:b5:04:15:cf:60:b8:6c:be:15:c5:
5a:a1:50:7d:91:53:c2:31:55:30:3b:d6:0d:bf:82:
8a:2f:b1:e4:65:e8:29:90:12:82:18:4f:9f:2d:ac:
e7:5c:d4:00:22:2c:6c:41:be:27:2f:51:c5:ff:ca:
2e:3c:5f:10:f8:88:95:9a:31:c7:e4:5b:72:80:33:
d7:e7:cb:11:9c:6e:36:ee:31:64:2b:aa:8f:a4:c4:
25:8d:a0:71:8c:46:9b:4d:29:e0:c9:4e:66:ea:28:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.206.0/23
IPv6:
2001:678:c30::/48
Signature Algorithm: sha256WithRSAEncryption
3c:7d:f4:c7:99:41:3a:cc:fb:ef:e7:f0:dc:df:02:1a:7f:f6:
95:83:45:00:12:84:61:1f:27:8d:99:d6:ce:9b:1e:86:14:a2:
be:62:97:e9:ce:e4:13:f5:69:ba:6c:10:43:29:6d:de:93:1d:
a6:75:d4:8e:f0:a6:f1:6c:36:43:fe:a4:1d:42:7f:a6:26:ac:
91:ba:53:6c:2d:3d:37:96:0e:fd:26:4d:2c:c1:30:8f:60:ab:
1a:ef:fa:e7:e1:5d:b9:86:6e:28:e6:9c:eb:95:aa:43:17:a4:
6d:3a:4d:b8:ce:19:bf:4f:1e:ee:f0:85:f5:01:5e:6e:bc:37:
f3:25:f2:dd:7c:a2:54:2b:93:30:1c:49:67:19:d1:e0:5b:e4:
5b:db:e1:d4:cd:16:f9:eb:bc:13:79:57:fd:04:64:3f:13:14:
68:dd:a1:b1:d7:da:80:e5:e9:17:a5:e2:90:59:69:3c:03:dd:
cd:ac:49:34:2a:73:87:90:52:77:de:14:74:47:eb:dc:0d:20:
7a:ed:c0:73:3d:64:54:e6:de:94:6f:84:80:2d:74:3f:d6:8d:
e7:58:aa:11:68:7d:6f:70:ff:ce:69:58:17:f4:11:6d:c2:63:
29:bc:b4:d6:f5:3c:14:8d:0b:9b:d3:8c:5e:af:1b:6f:ae:b3:
4d:9a:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:25 2024 by rpki-client on console-fra.rpki-client.org