Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
File: n-lNLu3NgkrB3nSt42wfnWnUlso.cer (raw, json)
Hash identifier: IQUyqCqnma/IjKcmiK6VE8IG/eYzp7rv1P8OCu9BSgw=
Subject key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECE2AF9F3F6110FFCABD7870FEA660828
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 17:18:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59517
IP: 176.122.200.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ce:2a:f9:f3:f6:11:0f:fc:ab:d7:87:0f:ea:66:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 17:18:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:5b:68:7e:ba:83:48:89:32:72:61:af:00:
70:7a:e5:33:ba:4f:5a:63:a5:ed:a0:55:ea:7a:0f:
8b:96:bb:e0:1b:1e:68:b7:99:14:88:2d:cd:69:49:
e8:94:21:2a:05:c7:f4:29:50:6e:34:01:93:82:d2:
20:1a:35:41:16:e0:81:ec:bd:3b:e1:4e:a8:ff:66:
21:3d:69:29:e2:25:98:23:d4:0b:3a:eb:01:f3:f9:
0f:7b:4e:a8:5a:f3:2a:8c:0f:71:0d:f2:36:26:97:
c1:88:34:9b:60:3b:a1:41:b7:8b:30:68:db:8c:67:
66:16:4d:07:fd:84:57:0a:1a:70:9e:f0:fb:00:31:
47:3b:67:f2:27:62:c3:7b:3b:a1:a4:07:a7:93:53:
27:f6:70:6b:d2:4d:fa:14:e3:d7:25:b0:9b:12:22:
e3:83:67:6f:4c:bc:fa:59:4b:2a:dc:00:b6:10:71:
5e:9b:fe:fd:ce:83:44:be:be:ae:a5:7a:df:bb:36:
dc:6d:7e:48:0e:ec:e7:8b:57:54:34:3f:0a:1c:97:
d8:a4:ad:54:d1:b2:c4:9a:65:30:ee:a9:7d:84:46:
d8:ca:9d:3f:2f:eb:12:ab:ee:16:06:93:76:a8:b1:
04:4f:d8:01:98:88:b8:68:01:cc:f5:2c:11:a9:79:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.200.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59517
Signature Algorithm: sha256WithRSAEncryption
20:e5:48:0f:2b:ca:41:8f:29:a5:68:69:2f:cf:d4:bd:5b:b7:
8b:33:aa:a4:d3:66:4c:6b:d5:1f:37:24:e2:c5:ed:8f:59:51:
da:0f:18:31:b7:37:f3:12:ca:cf:60:dd:c4:e1:79:cc:63:e8:
9b:81:89:76:2c:f0:5d:a7:54:3f:26:e7:01:0e:58:9a:a2:40:
f9:24:ba:99:be:0e:1d:9c:2d:c5:25:01:3b:24:41:6b:e0:e9:
2d:84:b9:6f:54:27:8f:a5:df:70:ca:b9:3a:20:1d:66:a1:56:
b4:9b:de:5e:82:38:1f:1f:24:86:36:6d:37:8c:44:9b:46:91:
76:66:23:5f:25:4c:35:59:0f:e8:9d:eb:8f:1c:fc:70:21:9c:
35:8c:b5:31:62:0a:29:76:2f:53:64:27:3f:da:2f:c6:ae:fd:
45:c9:fc:d3:d3:76:71:1c:92:db:f8:9c:eb:73:b1:6c:97:c7:
71:63:42:2f:45:d5:98:f0:46:81:8a:58:50:07:e2:6a:e3:0f:
9f:fa:eb:5a:2f:23:af:e9:dc:02:24:00:b6:ff:bc:41:dc:36:
5c:28:3d:bb:f6:99:76:96:d6:56:5a:4d:a2:8c:c2:40:99:b8:
67:d8:c1:e2:9d:d0:41:75:f3:6f:7a:e3:6a:19:ea:7a:c0:0f:
c0:d8:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:41:26 2024 by rpki-client on console-fra.rpki-client.org