Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer (raw, json)
Hash identifier: Yi8T94hiIe/KxBjoL4VL++W/Rylu13uzrrmpAN6th4A=
Subject key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA294C71AAC8BC92241D16BE2571BB5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.14.36.0/22
IP: 45.132.24.0/22
IP: 185.155.52.0/22
IP: 2a0e:65c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4c:71:aa:c8:bc:92:24:1d:16:be:25:71:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3718b734349bf327d9453b96501e44b192e55142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:d3:55:5b:6f:04:57:fe:bc:07:67:4f:41:
41:49:4b:6d:d0:8f:d1:6b:1c:51:e0:00:e0:42:58:
c2:5e:bc:8c:4a:5b:6e:27:74:6b:ce:7f:4a:90:2b:
ea:45:8d:b7:90:9d:81:00:97:82:ec:10:63:ba:bf:
9c:7b:b8:86:0f:34:3f:2c:42:18:6c:af:a3:02:c8:
bc:b8:68:36:6b:53:92:7d:ba:c1:d7:65:50:13:b8:
27:0e:ee:43:59:99:8a:45:f4:b9:7f:ff:bd:6b:22:
a6:11:1a:52:9b:2d:49:c4:d0:f1:31:67:ca:d8:14:
18:30:69:dc:b0:bf:b5:4f:11:19:b8:ae:60:4a:e4:
af:7e:fa:62:47:c4:32:56:69:e9:26:68:e2:f3:d0:
5b:12:41:60:e8:b2:c8:8c:02:9d:ab:e4:60:00:4a:
9e:1a:4a:3a:7a:6c:9e:20:4b:7e:6b:7d:1f:99:c5:
89:ad:b2:ff:fc:9b:55:51:93:ae:b6:b0:49:08:a7:
33:be:63:a2:96:df:41:eb:97:f3:73:0a:94:4c:fe:
cf:7b:2c:e4:58:72:c1:0d:5d:1d:11:2f:9c:35:58:
19:bd:68:9f:43:5d:27:04:86:9f:c5:d4:a2:7c:d8:
d6:c2:2e:d7:b5:2b:9e:fc:69:3d:2d:f8:b8:1a:03:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.36.0/22
45.132.24.0/22
185.155.52.0/22
IPv6:
2a0e:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:ac:25:5a:c1:21:22:0a:42:7c:82:66:9f:90:ee:1c:9c:0f:
2c:ca:67:1b:51:c7:5e:20:85:de:e4:d4:a0:24:2b:de:b1:66:
17:c1:47:48:a0:65:00:56:d3:b5:90:4b:fc:85:09:1d:76:a8:
45:d8:5f:b2:1d:86:ab:27:1c:2d:ac:17:ad:1f:2f:a0:b8:81:
bb:76:da:51:57:ff:52:13:cd:e0:13:70:b8:83:92:5f:4f:4a:
28:6b:90:4c:da:69:22:6f:1a:b1:9a:01:97:04:8b:d6:97:28:
9a:2d:3e:f6:24:d1:d2:98:97:3c:d8:d1:fd:45:c1:a7:3b:9f:
a7:af:2e:50:db:16:49:57:87:02:70:24:ad:c3:aa:ca:5d:6b:
5a:f5:5a:1e:eb:5e:98:64:a8:18:a7:9f:9b:ae:39:c7:1f:40:
13:ef:8f:73:9d:4e:1d:b4:ae:11:c2:f9:42:44:3c:2b:4f:93:
54:03:44:03:8e:f4:29:4e:c1:d1:9e:a4:82:39:39:42:b0:68:
fb:a9:45:e5:50:18:52:e1:5b:94:3d:89:78:7b:d7:04:7e:77:
bc:55:45:48:3c:3c:bc:ec:ff:54:d5:51:4e:75:f8:34:23:e9:
d2:10:0e:80:25:54:99:f6:6e:e0:df:20:d8:9c:4d:80:0a:be:
c9:9d:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:42:47 2024 by rpki-client on console-fra.rpki-client.org