Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer (raw, json)
Hash identifier: NOWvnVbXbcybRqmkZojPgX87lRy/J1uUDAYhd7GnxI4=
Subject key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5F4AA6912C4A2ACFB66746A1B15CCED4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 11:32:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.102.85.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:4a:a6:91:2c:4a:2a:cf:b6:67:46:a1:b1:5c:ce:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 11:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:19:2b:97:f6:29:0f:b2:d5:73:02:71:1c:
e7:21:32:fa:2a:47:6e:58:d9:e6:e8:a2:4c:f2:34:
1d:40:d3:67:73:89:b7:c5:03:12:86:e7:f7:9d:ad:
2b:3c:45:64:c2:24:a4:ca:50:41:fc:f5:8a:eb:9e:
9e:46:0f:0d:04:fe:39:f6:58:3a:2f:26:28:08:bf:
a6:04:72:42:6f:df:bc:90:ca:1b:a4:41:f2:50:ef:
9a:0d:ba:a9:59:98:6e:72:f6:58:1d:eb:dc:14:e0:
7e:33:57:0b:a5:4d:08:9d:60:13:0c:e5:c1:7a:0a:
08:37:c9:a7:75:89:10:f3:ed:14:a6:f0:fd:b7:41:
59:86:17:60:d6:e2:13:4f:02:c0:67:ef:d9:b2:37:
4d:cb:43:4c:c2:c1:40:cc:61:cb:d3:ff:47:ad:87:
cf:e9:52:1c:8a:69:ae:94:d6:8d:31:9d:31:56:30:
be:0e:eb:e6:55:0f:93:ce:d8:73:62:3f:18:b2:25:
30:bb:9b:2e:cb:71:22:35:f5:33:3d:d6:4e:0a:20:
e1:dc:de:a8:71:5f:7c:5e:1d:07:9a:d0:bf:a8:d0:
79:83:fa:ce:97:28:06:35:5a:48:f0:55:97:07:f5:
db:0d:28:af:a2:25:b7:fc:28:ea:11:44:a6:95:60:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.85.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1c:f7:69:4c:79:21:a5:d1:c5:b1:03:49:6a:6e:c4:32:c7:
a4:84:c5:57:ff:bf:90:4e:45:b5:08:b9:11:ce:61:14:c0:a5:
8c:4e:96:8b:3b:75:10:2a:b8:67:75:a1:88:80:39:37:26:5b:
55:97:23:09:cb:91:a4:83:4f:80:93:96:61:86:a8:db:4e:20:
eb:8b:d4:89:c1:c9:d2:ca:c0:e9:cd:e3:69:e1:3e:25:7c:60:
0b:db:d1:a9:d6:11:28:b9:34:eb:03:3e:0b:17:87:3a:e9:cb:
cd:9c:83:54:23:00:fc:3e:c2:6e:fb:96:08:3c:ea:41:90:f1:
85:7f:30:09:93:b4:79:a4:50:1a:88:bf:dd:d8:fd:c4:2d:c7:
aa:fa:8b:13:d0:a7:07:0b:7a:e4:ac:64:ab:7f:93:74:66:4f:
25:d7:50:14:0d:88:29:53:83:f7:26:98:99:a7:9c:76:0e:ca:
00:36:6f:a7:78:63:98:79:f9:37:8f:1c:96:48:66:0d:04:ad:
9f:83:14:d1:cb:84:bb:ea:b3:77:7e:b0:6e:70:d9:33:12:79:
01:89:e4:39:42:fc:4b:77:51:d2:3d:cc:8b:72:1a:a6:bf:ac:
b5:da:9b:f8:7d:5a:31:fb:94:9c:f3:1b:37:5f:80:6a:88:34:
90:82:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:13:51 2024 by rpki-client on console-fra.rpki-client.org