Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
File: nUxyfODk4Wasa-ME__JRgW1RpEI.cer (raw, json)
Hash identifier: 6TbprjBxaU7JHiKxVUMkEOKb0z7RWyfomLvNB4+WJGk=
Subject key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8016E7DC0FFF2A83DE004B46FDDB506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29160
IP: 80.74.80.0/20
IP: 88.81.0.0/19
IP: 188.139.0.0/17
IP: 217.8.64.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6e:7d:c0:ff:f2:a8:3d:e0:04:b4:6f:dd:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:d7:f3:45:d8:1e:2f:64:00:df:25:41:bc:
b2:e6:eb:36:9a:75:7c:5d:af:ab:1a:bc:75:f2:13:
e0:5c:77:a7:67:d7:c2:6a:7f:db:b6:27:c9:6a:c6:
da:d7:67:70:2a:54:9b:44:08:f9:c8:6e:54:3a:a3:
e3:4a:e3:6e:94:83:e9:e6:8f:d2:ee:f2:b7:93:e8:
b4:53:6a:98:7b:25:35:61:09:ee:05:d6:d7:8d:1f:
c7:c5:1b:ba:30:44:72:ba:23:5f:f3:af:c7:33:3f:
9d:48:86:05:f5:e3:ca:66:d2:ca:48:1b:fa:99:56:
91:ce:f8:ea:8e:2b:89:2e:07:14:ac:d6:58:b5:d3:
61:cd:e1:ca:fa:20:6e:53:ca:fa:4f:b7:7f:b0:35:
a8:8f:00:5f:79:e8:3a:04:75:dc:9e:83:00:f6:3f:
d9:f7:c2:0c:2b:25:25:fe:f9:5d:6e:9a:41:44:a9:
b8:8c:de:00:0b:97:a7:ae:51:80:ce:9f:4c:e6:a5:
3b:91:1f:4c:4a:40:c6:92:bd:dd:2d:7a:be:1a:9e:
43:3c:c8:69:dd:e7:74:90:35:32:a5:8d:d8:10:3b:
6e:d7:3d:aa:55:73:33:cb:9c:77:1f:13:7f:80:90:
24:e7:07:37:e2:04:7e:90:98:15:9d:5d:b8:1b:f2:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.80.0/20
88.81.0.0/19
188.139.0.0/17
217.8.64.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29160
Signature Algorithm: sha256WithRSAEncryption
10:ef:29:5d:29:27:8a:ab:c6:5d:ec:90:90:81:58:96:f2:f1:
22:57:63:fb:bf:11:91:42:c2:e3:96:4c:ce:70:9f:24:9b:61:
5e:07:a9:8f:5c:a8:67:0c:db:a0:22:fd:6d:15:ed:51:17:93:
6f:cc:27:ae:90:d4:23:35:63:cf:06:83:ba:9d:35:3c:ea:92:
73:84:6a:8f:6b:0a:c0:e1:6a:32:fd:13:c9:06:fa:21:42:23:
5a:2b:6c:1b:0c:c2:90:cc:21:a8:2f:82:47:83:af:7d:1d:d5:
98:a7:d4:bc:cf:77:d8:5b:83:b5:5e:25:4f:ba:50:ae:87:7e:
e2:fb:fe:09:20:0a:b5:a9:9b:54:a6:70:7b:3a:b3:14:1e:7a:
6e:53:92:dc:73:4e:dd:75:8d:3e:7d:63:53:bf:da:ae:7b:63:
a0:06:89:c9:99:f8:a2:20:7f:43:04:bb:42:5e:23:e6:c9:71:
a1:9e:20:79:e1:4a:d0:ef:96:fb:6e:ee:c7:6c:a2:60:09:c8:
67:4c:9a:4f:ed:46:d1:61:73:e8:a0:70:cd:11:69:35:a9:53:
9e:83:45:a6:55:94:b4:2c:f4:0e:18:8e:97:9c:92:42:5e:64:
e4:ab:3f:d3:21:0e:e3:80:32:83:45:3d:b7:cc:6b:a7:9b:1e:
55:c1:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:57:37 2024 by rpki-client on console-fra.rpki-client.org