Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer (raw, json)
Hash identifier: ENVHvDJt7oMFklr6OJC5LGFQSjAO6HIYTHtFg4P7KMw=
Subject key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B22EB8E94639A81DDFE5906E58F4B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210136
IP: 62.192.144.0/22
IP: 2a0d:a540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:b8:e9:46:39:a8:1d:df:e5:90:6e:58:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcd77e6877829833043333538b47f12682cebdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:c0:50:b7:c4:6f:bc:c4:b9:0f:70:a1:82:
c9:97:e9:c2:31:83:3d:71:34:85:99:3f:c2:78:6c:
cb:97:e6:a0:15:63:ea:94:96:45:7c:13:6b:8a:98:
c4:32:91:91:af:27:18:e8:6c:5b:e6:a4:cb:d0:3c:
47:29:a1:fa:82:29:9c:20:3b:d9:57:29:be:b7:8c:
ec:6c:a9:34:5d:e6:69:30:f7:7a:25:85:86:66:2b:
a4:90:c7:82:cd:00:02:da:7f:09:48:f9:cc:5f:ed:
0e:f4:5a:3a:53:1d:3e:54:de:82:21:fd:c5:23:5a:
a4:77:fa:16:82:3a:dd:11:b5:e6:d9:c9:62:17:65:
55:dc:f2:14:fa:80:0b:5e:bf:0e:fd:9a:78:7c:16:
03:23:6e:8f:29:04:4c:54:71:7d:63:37:7c:29:ea:
5a:a7:93:4d:36:57:12:1f:be:b8:ac:ea:de:73:16:
4d:92:78:d6:5c:f5:bf:c1:eb:e5:3c:65:81:6d:63:
c1:a5:02:6b:5d:25:49:c8:41:0f:21:c6:0c:53:3c:
82:8f:95:c8:9f:5d:99:49:25:06:21:b2:5d:89:3e:
14:a6:36:ea:ea:98:51:37:11:d9:7d:24:8e:4a:02:
d0:fa:28:0e:92:87:4a:3c:fe:68:91:f9:68:81:76:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.144.0/22
IPv6:
2a0d:a540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210136
Signature Algorithm: sha256WithRSAEncryption
0a:cf:03:10:0d:59:3f:2c:c0:31:60:39:16:97:28:35:e1:71:
bf:22:55:2a:73:75:f7:97:26:9c:c4:dc:89:4d:1b:ac:60:2d:
fa:4c:e2:aa:01:1b:72:4b:13:c0:c0:fd:b3:54:dc:e2:4c:c2:
d6:45:75:9e:86:5d:b0:bb:79:e5:67:e0:ec:4a:b8:e9:a9:f1:
ba:77:9e:2e:56:75:c4:4d:44:d4:7a:0f:5e:82:e2:e2:b3:65:
fc:a8:e6:1c:e3:da:f7:d0:35:d5:61:f3:20:f9:a4:28:51:6f:
d1:92:ab:e3:ff:14:16:e9:17:c4:37:2f:1b:7d:5c:62:e9:91:
0a:e7:6d:7e:78:ec:db:9e:97:f9:e6:9d:94:9f:75:b5:01:d3:
64:a6:9d:75:88:9b:1f:41:3a:d1:5c:1e:39:54:ab:8a:4d:17:
af:cd:4c:6c:02:03:20:f3:d3:d5:f3:55:8d:cc:b4:fc:40:d8:
85:5c:d8:f6:fc:39:2a:a9:05:f1:16:58:ce:7f:a2:55:f8:4d:
3c:3e:79:f9:37:99:a1:39:48:10:ab:9b:b4:fd:b7:a6:f5:94:
ee:0c:7d:40:93:75:64:6c:20:50:3d:7a:a3:c0:95:65:39:39:
c0:4a:18:9a:7d:06:cf:00:8e:55:bd:77:b7:a2:42:e5:1d:0a:
ac:62:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:36 2025 by rpki-client