Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
File: nCCRV794nmu6NODb0-_s2bIN0Gs.cer (raw, json)
Hash identifier: /8Rtvp8EMnt84BUrNBz0z3dxSZ+ya6/zNWy7j9FjexI=
Subject key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794FF8C9EA5401491F0A0DD77DD355A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50499
IP: 193.106.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ff:8c:9e:a5:40:14:91:f0:a0:dd:77:dd:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:33:74:56:ce:32:39:7f:a4:ed:79:76:62:
e4:77:1d:5b:ac:33:04:a1:e0:13:df:b7:39:d2:f5:
ea:da:35:8e:b5:98:7d:f5:07:a2:52:31:95:08:80:
42:d7:19:43:00:16:41:9d:2b:16:3f:aa:e5:e5:ba:
1d:33:66:f8:8c:89:ae:dd:e1:80:ff:0c:c3:43:96:
3d:5a:05:2a:b5:9c:4e:07:07:de:10:2d:51:53:ca:
98:67:cc:32:e6:9b:f9:b4:f2:6b:e1:29:68:f5:f3:
ed:93:39:e6:4f:46:e1:6b:f2:cd:69:33:fe:4d:7f:
05:23:51:f9:b1:41:d5:78:24:b5:df:74:cc:3f:ae:
c2:b9:57:84:b3:3e:0d:cf:c2:16:e3:51:62:0d:d6:
5b:06:f1:bb:84:98:71:61:64:19:5b:ec:37:35:fc:
93:f7:b5:b8:54:69:f3:be:9a:3c:56:3a:36:15:9a:
18:5f:7b:e4:0f:9f:ab:f5:f5:5b:29:eb:2e:77:b8:
05:8f:3c:b3:9b:4e:47:11:21:90:4b:03:d7:68:66:
61:fa:22:a9:85:63:b8:b3:66:69:f5:88:a2:4a:33:
4f:82:c3:c1:7d:8c:d4:79:9e:55:93:af:86:14:8d:
89:1c:00:84:18:8c:e9:b5:35:52:7b:93:fe:7d:a2:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50499
Signature Algorithm: sha256WithRSAEncryption
7a:c1:bb:d6:aa:2f:1b:b7:07:45:e7:b0:dd:44:c8:e9:9f:f5:
cc:08:db:b0:c7:f1:fd:f9:2c:6d:55:75:42:8e:2a:ce:16:c4:
e8:44:b3:62:0b:0b:e0:90:a2:81:6a:de:8c:6e:73:ad:cb:d7:
d4:44:63:1e:f4:15:8c:a8:69:31:ad:fa:70:5d:00:6f:a1:18:
12:9a:73:0b:3e:b4:4b:f8:42:d7:aa:ae:d3:a3:1e:c2:10:78:
7b:a4:26:e5:b5:4e:2f:9a:e2:a4:69:cd:8c:04:fa:3f:59:a7:
a7:af:f3:ba:38:62:ea:8c:f9:f2:e4:09:ed:ef:62:a0:49:7e:
4e:ad:02:8e:1b:6b:b4:79:e5:d6:bd:e5:f3:d3:38:28:57:75:
ee:1a:25:51:b8:a6:bd:97:01:f3:89:f4:fc:3e:b5:d5:1b:8f:
57:45:47:f9:78:4b:62:98:68:51:d1:b6:ce:92:a3:4b:b0:ff:
f3:86:cc:bd:b4:9b:f8:c8:99:62:8a:90:3d:c8:b7:b5:04:dc:
c4:f9:63:81:21:cd:6f:af:d4:06:df:4c:7f:ae:4a:16:3d:b4:
88:92:79:df:c4:1c:b8:7f:12:a9:03:16:48:d7:34:cb:46:54:
cd:24:23:ba:c5:29:8a:76:8e:fd:b1:ce:92:f4:80:35:2b:d8:
25:03:19:73
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzHlP+MnqVAFJHwoN133TVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzIwOTE1N2JmNzg5ZTZiYmEzNGUwZGJkM2VmZWNkOWIyMGRkMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVEzdFbOMjl/pO15dmLkdx1brDME
oeAT37c50vXq2jWOtZh99QeiUjGVCIBC1xlDABZBnSsWP6rl5bodM2b4jImu3eGA
/wzDQ5Y9WgUqtZxOBwfeEC1RU8qYZ8wy5pv5tPJr4Slo9fPtkznmT0bha/LNaTP+
TX8FI1H5sUHVeCS133TMP67CuVeEsz4Nz8IW41FiDdZbBvG7hJhxYWQZW+w3NfyT
97W4VGnzvpo8Vjo2FZoYX3vkD5+r9fVbKesud7gFjzyzm05HESGQSwPXaGZh+iKp
hWO4s2Zp9YiiSjNPgsPBfYzUeZ5Vk6+GFI2JHACEGIzptTVSe5P+faKUOQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJwgkVe/eJ5rujTg29Pv7NmyDdBrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzU0ODll
Ni0zZTMzLTRkZjItOTBiOC0xMTY5MDllNDM4MjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNTQ4OWU2
LTNlMzMtNGRmMi05MGI4LTExNjkwOWU0MzgyNC8xL25DQ1JWNzk0bm11Nk5PRGIw
LV9zMmJJTjBHcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwWr4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDFQzANBgkqhkiG9w0BAQsFAAOCAQEAesG71qovG7cHReew3UTI6Z/1zAjbsMfx
/fksbVV1Qo4qzhbE6ESzYgsL4JCigWrejG5zrcvX1ERjHvQVjKhpMa36cF0Ab6EY
EppzCz60S/hC16qu06MewhB4e6Qm5bVOL5ripGnNjAT6P1mnp6/zujhi6oz58uQJ
7e9ioEl+Tq0CjhtrtHnl1r3l89M4KFd17holUbimvZcB84n0/D611RuPV0VH+XhL
YphoUdG2zpKjS7D/84bMvbSb+MiZYoqQPci3tQTcxPljgSHNb6/UBt9Mf65KFj20
iJJ538QcuH8SqQMWSNc0y0ZUzSQjusUpinaO/bHOkvSANSvYJQMZcw==
-----END CERTIFICATE-----
Generated at Fri May 3 02:13:20 2024 by rpki-client on console-ams.rpki-client.org