Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
File: nMIzEMkVpP4JXht0oGbRze5HhD8.cer (raw, json)
Hash identifier: Ot7+MtlYkELeyJNbkSlJUOdW5uyrPKgxiSfD2rlHbA0=
Subject key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424EEB15A22046772D35B90A1AA43FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.49.180.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ee:b1:5a:22:04:67:72:d3:5b:90:a1:aa:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:be:54:3b:6a:b9:0d:db:26:d8:4a:fd:35:
f0:c7:63:90:8b:b4:9d:bb:7f:38:e0:03:59:5b:ac:
74:8a:b6:a6:fa:d1:c5:d7:88:8d:09:a8:b3:30:5c:
9e:2b:dc:b4:88:8b:05:51:88:b5:85:10:a6:69:37:
97:52:51:de:e7:97:41:a4:a9:40:53:73:90:5f:95:
67:af:4e:93:fd:1d:ce:e7:b9:2e:1f:e9:65:bd:ec:
89:f4:39:27:88:40:ed:a7:83:50:b2:e5:2c:91:21:
6a:9a:cc:c0:d3:86:06:ce:26:8c:2d:a4:0c:34:8f:
6d:0c:e1:04:68:98:3a:53:e4:39:e0:95:36:66:2a:
70:48:38:1d:f1:77:26:c7:e5:dc:69:79:4e:b3:30:
1c:6b:06:a3:b6:04:13:b8:d9:e1:da:58:13:6e:32:
a0:82:5f:71:4c:b5:2d:f5:e0:44:49:86:54:b4:7b:
39:db:41:fa:4b:d8:12:12:3c:08:09:c9:69:3e:0a:
8a:15:cb:ab:5b:a6:a4:01:8b:50:a3:88:98:e6:a9:
d5:ae:23:40:c8:6a:2e:73:82:a6:b9:50:a7:76:fb:
87:96:1f:1e:d6:a8:32:60:1f:39:96:d0:b3:99:81:
bf:14:98:6f:14:07:89:04:be:07:4e:05:10:99:86:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.180.0/22
Signature Algorithm: sha256WithRSAEncryption
88:58:60:5b:c6:87:f6:83:04:1d:a0:44:79:b2:5a:c6:53:06:
42:6b:b1:6b:16:58:3c:00:59:21:88:99:e0:69:19:ef:b7:6d:
41:67:4c:e4:37:5b:2d:23:69:0b:c8:0e:08:e6:fc:86:b1:9a:
a6:99:7f:11:37:e0:28:04:c3:aa:f0:a4:02:31:a9:98:15:57:
69:69:ba:4d:63:9a:08:44:f8:6b:c3:6e:2c:05:c4:8f:3a:48:
d4:33:c7:45:a6:c2:55:6a:75:cb:8c:0e:14:a2:3a:e0:cf:84:
fe:da:23:33:1c:81:30:74:62:47:27:65:cc:11:79:ea:70:c4:
6b:88:47:f5:7d:65:32:2a:5f:13:0b:13:a3:80:c7:58:2d:c1:
41:d5:84:f9:61:fa:41:c8:9c:19:a5:de:44:28:cc:55:18:0c:
d6:9f:5e:1f:d1:be:8d:a0:d5:4b:1f:75:2e:2b:ff:af:b5:42:
27:e6:c0:36:b1:c2:44:6e:b7:4e:dd:6b:19:c6:63:62:44:6c:
db:29:2a:91:35:85:fe:e7:f4:a1:6f:6b:21:cd:00:bb:96:1f:
c8:ec:34:ae:1e:b8:d4:cc:e6:9b:cb:37:f6:45:20:ec:bb:28:
a7:4a:11:a7:eb:4e:da:1d:d8:24:a0:14:19:8a:6f:b6:30:d1:
12:68:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:53 2024 by rpki-client on console-ams.rpki-client.org