Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer (raw, json)
Hash identifier: M8b3WJSRZQS5NCQ5snhiKWmk95US2ATm3ktIziC1u8M=
Subject key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010BA098F197AEFCFC91212C7BFB43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5628
AS: 6855
AS: 197642
IP: 78.98.0.0/15
IP: 84.47.0.0/17
IP: 87.197.0.0/16
IP: 91.127.0.0/16
IP: 91.223.209.0/24
IP: 95.102.0.0/15
IP: 178.40.0.0/15
IP: 185.19.72.0/22
IP: 194.154.224.0/19
IP: 195.91.0.0/17
IP: 195.146.128.0/19
IP: 212.5.192.0/19
IP: 213.81.128.0/17
IP: 213.160.160.0/19
IP: 2a00:12a8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:a0:98:f1:97:ae:fc:fc:91:21:2c:7b:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:fa:5f:58:01:8b:2a:6f:b1:f0:eb:e9:30:
15:8c:33:86:c8:85:6c:94:97:f0:83:d1:90:10:27:
61:43:0b:7c:3c:9e:f0:67:45:29:e9:d2:a1:b5:c0:
98:67:49:0b:2d:16:56:b5:87:17:ae:dc:93:c9:c0:
03:7a:5b:b3:0c:2c:3b:c1:70:12:c8:40:0e:1a:a1:
50:a9:54:68:2d:9e:1f:a6:62:2f:c0:51:2f:70:c4:
6c:b6:34:99:dc:9e:9f:d5:61:fc:e5:bc:4c:65:f5:
b6:6e:f6:1b:78:c0:f0:9a:3e:3c:46:74:6f:68:80:
f6:10:4b:02:a7:db:7e:58:a6:c7:cc:c5:15:87:22:
69:a5:2e:ae:30:b6:cf:1d:85:44:c5:fa:77:92:18:
14:09:29:ea:d8:9e:e8:02:a2:db:87:db:d4:06:6b:
71:9d:ca:80:06:03:a1:de:96:5c:06:4f:53:90:a0:
21:10:e4:84:a8:3b:88:01:14:fc:7e:b4:22:9d:30:
6e:7a:2d:28:c2:e3:20:9a:d1:f5:4f:88:25:23:6e:
41:ed:ca:72:0e:97:ca:3a:1d:3a:7b:80:38:28:95:
c8:6a:31:cc:82:6c:5e:1b:a1:67:31:02:9e:4c:b6:
15:00:01:f8:fa:b6:50:f8:de:07:05:03:f9:21:24:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.98.0.0/15
84.47.0.0/17
87.197.0.0/16
91.127.0.0/16
91.223.209.0/24
95.102.0.0/15
178.40.0.0/15
185.19.72.0/22
194.154.224.0/19
195.91.0.0/17
195.146.128.0/19
212.5.192.0/19
213.81.128.0/17
213.160.160.0/19
IPv6:
2a00:12a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5628
6855
197642
Signature Algorithm: sha256WithRSAEncryption
91:57:9e:84:9d:e6:20:57:bb:30:df:62:58:ae:95:27:19:20:
f0:a9:54:aa:e8:27:c8:b9:81:71:7b:82:94:e2:80:d6:3e:7e:
c4:b5:a3:6c:63:5f:e6:ab:07:e0:fb:c8:3b:45:aa:cf:df:0b:
3b:0c:fd:fb:77:00:60:f7:23:70:75:87:90:cb:f2:2c:e6:a3:
67:c3:c4:f3:0f:de:ff:a2:96:32:ec:c8:a5:0e:71:8a:77:63:
b3:9a:91:04:92:8d:72:39:2a:ca:7b:fa:b8:c5:7f:ce:99:bf:
32:fa:5d:b9:92:3a:7f:b8:06:b9:ed:63:20:f5:e4:91:06:c5:
29:ef:c4:13:19:3d:b5:d0:2c:a0:fe:06:0d:4b:71:57:f7:47:
79:7a:ee:a3:52:6f:eb:b3:6c:6b:a3:28:3e:a9:cb:a8:fa:77:
c1:01:67:67:6d:ee:1c:8a:ac:d4:93:8e:56:46:69:ac:44:65:
3f:56:27:1c:d4:8b:9c:f5:f5:27:d2:5f:fc:51:10:9b:09:43:
98:79:8a:cc:0d:bf:c7:9b:22:c0:9e:56:64:9d:ff:fb:2a:66:
91:51:03:ac:60:80:ff:64:2a:f1:29:77:82:46:86:e9:50:b0:
0f:30:a2:fe:2e:66:f5:c0:26:cf:e3:a0:1c:99:ae:97:5b:5e:
b9:01:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:41:27 2024 by rpki-client on console-fra.rpki-client.org