Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer (raw, json)
Hash identifier: oYdFmPFwl/Epl8cC0wjvM+m+KqKT6VEAIQS9ojDjL0w=
Subject key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649A423CD242FB2ADBE381C704FFA4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.180.164.0/22
IP: 2a0a:bc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a4:23:cd:24:2f:b2:ad:be:38:1c:70:4f:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:56:ed:50:79:98:a5:fd:01:a4:4b:4d:22:
e1:8a:5c:71:ba:ae:f3:4d:ae:a0:7a:65:e2:a8:94:
2b:1b:e8:23:97:dc:95:83:19:e9:dc:4e:f7:12:1d:
08:bc:ef:59:9c:77:17:69:6a:d7:93:c4:28:d5:1a:
c9:42:5d:7d:e2:ba:73:92:e7:aa:86:a8:6d:ab:2c:
1b:f5:bb:e5:cc:1d:60:cb:63:a6:e0:6c:f0:70:9a:
67:95:3a:31:7d:48:1e:9d:e3:c8:0f:ee:c9:22:b5:
4f:f8:03:e1:fa:b9:8a:75:59:14:60:e2:7b:a7:58:
cb:32:7a:f2:36:05:4b:a4:f1:22:d3:03:26:28:c8:
f6:3b:c3:31:cd:5d:72:9c:a9:70:8d:66:7d:fb:24:
3d:b9:e7:81:6d:cf:3d:d9:0b:e8:2c:09:83:39:27:
3a:64:50:0e:7f:0b:d2:11:ae:72:b3:53:e2:6e:af:
01:80:a3:30:f3:bf:3a:fa:f5:59:f3:3b:35:0f:36:
ab:fd:10:a9:56:4f:0b:17:4c:23:74:ae:1a:92:31:
28:af:d9:45:26:d2:0f:37:91:c4:66:aa:17:ae:f5:
b6:f5:09:9d:dd:9b:72:d7:11:16:41:bf:bf:32:1b:
db:ba:fe:91:d0:eb:6b:2d:35:79:59:db:6a:d1:51:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.164.0/22
IPv6:
2a0a:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
5b:cf:d5:47:dd:cd:53:a2:b6:d4:c4:6c:78:69:2b:af:8f:2a:
b1:5a:0b:9f:9f:0f:97:42:b7:72:6f:6a:80:96:54:7c:f3:c6:
60:5a:52:cb:74:d3:da:7a:3b:8c:6a:e6:ad:38:24:dd:0b:29:
9c:dd:40:7d:67:1b:01:da:03:a8:1d:77:a6:36:07:4f:36:ae:
3e:78:65:de:cf:2f:48:08:68:68:20:92:2f:7d:f8:f3:59:a3:
a1:15:d1:83:1c:45:46:47:2d:da:9f:8e:a8:46:cd:e9:1d:c5:
a9:56:25:25:ca:9b:d8:c8:d5:8e:5a:ce:ee:0a:64:9c:d3:fe:
d2:0c:5d:2e:2f:ca:4e:f7:21:74:2b:05:25:ea:57:47:71:e6:
d6:27:4f:4c:a3:55:19:d0:ca:16:fb:eb:1d:f8:b5:4a:5d:73:
87:c4:e4:f9:da:c9:f4:98:1f:f9:01:18:4c:30:07:ea:a9:98:
71:60:33:1e:97:53:59:20:52:76:f1:54:3f:a8:8e:35:b2:58:
73:80:67:be:c1:cc:02:70:8b:e5:a8:28:4d:87:04:65:f8:1c:
43:0f:87:9a:c0:7c:f2:a9:4a:08:d8:6f:01:49:ed:75:58:8b:
90:ce:ff:a2:d5:62:30:18:78:c1:09:eb:5f:ea:6b:e0:0f:29:
e8:04:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:24 2024 by rpki-client on console-ams.rpki-client.org