Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.cer (raw, json)
Hash identifier: JdaFDWA8MSdzpS99x5Pkgp0eSXOgtGzClIm9u3lhxg0=
Subject key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EEE7D8D0B607FB7F3C2299BE2BAEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205219
IP: 217.197.100.0/24
IP: 2a09:b7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ee:7d:8d:0b:60:7f:b7:f3:c2:29:9b:e2:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:88:63:8c:66:cb:77:09:d9:1e:37:13:15:
07:0b:ed:35:ef:b3:fa:e8:31:98:c0:15:f4:89:f3:
6b:65:d5:b3:1b:64:e1:bf:da:af:67:6d:d7:41:23:
8c:fe:87:c7:d3:79:c3:c2:87:a3:fa:e8:7c:87:53:
de:6e:32:bb:24:8c:9a:14:bc:b7:2e:0a:4b:a4:6d:
f3:82:1c:67:32:af:69:6e:30:52:fb:63:fc:7c:1f:
cc:33:5d:62:c1:28:78:b9:d2:d8:96:b8:0f:71:6c:
8b:70:15:2e:0c:a3:ba:ca:42:af:22:b8:dc:93:2e:
20:ea:8e:f3:7f:51:0d:46:bf:0b:ad:7d:69:7d:56:
ac:13:6e:00:98:0f:8f:c5:22:5e:79:f1:02:78:aa:
50:16:10:51:48:27:93:db:7b:b6:7a:91:03:55:1f:
49:f1:8f:7b:82:17:00:54:26:dc:d6:db:81:99:47:
fe:40:ca:d6:d3:b2:fd:64:6d:97:27:80:0b:77:1b:
ae:09:7c:d7:7a:64:34:f9:3f:ab:22:40:b2:05:93:
63:34:25:aa:c4:f6:cc:5d:92:53:1a:73:49:6c:a0:
26:fa:62:f9:4f:a1:dd:0d:a0:e6:56:db:fb:85:a8:
12:84:e4:0a:47:03:4e:79:ee:af:08:a3:8d:15:e0:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.100.0/24
IPv6:
2a09:b7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205219
Signature Algorithm: sha256WithRSAEncryption
42:ea:90:ce:11:73:cb:34:bf:60:f3:20:79:65:2f:88:63:19:
34:0f:98:8e:dc:f7:d9:5d:fe:6c:c3:be:6c:da:7c:fe:89:37:
ac:73:2a:ac:58:d2:80:ef:8e:3d:d7:c0:9b:4c:89:93:a5:3b:
85:7c:b6:c5:c7:6d:77:b2:52:3d:9c:b2:1e:08:c8:1d:cb:42:
df:52:54:30:f6:5f:3c:ae:1b:37:8a:13:bc:4c:5a:43:b9:85:
db:bf:6f:57:06:4a:78:10:e7:ff:e3:b2:30:ca:89:fc:cc:50:
1e:76:f6:39:67:d8:f1:f0:2c:ee:2a:6d:eb:75:74:d4:31:f0:
97:65:12:a1:91:e6:2c:f7:2b:7d:e4:65:82:cc:df:75:83:0f:
ed:72:3b:b2:bc:a9:7e:66:d6:c5:54:ba:9f:25:ca:54:0b:b0:
1a:e0:19:fb:0b:de:73:68:35:5e:60:90:b3:f8:b6:0b:1f:6e:
7d:ba:83:62:a8:e1:bf:32:08:19:29:85:0d:25:b2:5c:a9:31:
11:e3:7c:6f:71:77:8d:c0:ac:66:be:1c:82:3d:fd:5a:a6:dc:
c5:ba:75:b7:11:d3:d3:04:40:61:62:b8:15:09:33:06:46:4f:
43:2b:70:16:c6:c9:23:54:2a:ee:7d:00:ea:73:20:05:06:09:
80:c6:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:48 2024 by rpki-client on console-ams.rpki-client.org