Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
File: nVE44frPe2XbtXX6fUckDCeLNN8.cer (download)
Hash identifier: L2DzpMlwQMYuo1NDq4ttA53cReSDpczGZjt+GzbcqkE=
Subject key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0ACC83C97ECCA874E878B56384849
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate valid until: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
1: AS: 206259
2: IP: 185.83.144.0/22
3: IP: 185.174.28.0/22
4: IP: 2a05:9bc0::/29
5: IP: 2a0b:8100::/29
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:ac:c8:3c:97:ec:ca:87:4e:87:8b:56:38:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:70:89:c1:ef:50:1b:34:6c:38:56:ac:a5:
6d:0c:67:62:6f:7d:bb:f2:88:aa:7e:cb:35:12:39:
b5:75:c7:ed:3b:3e:0f:f6:fc:4b:5e:97:05:51:1b:
b9:15:50:d4:b9:ac:32:48:bb:2b:26:35:12:d9:fe:
4c:aa:d8:af:e1:6f:6b:8c:7e:41:c3:67:d8:1f:ef:
2d:bd:69:eb:a9:9f:87:fe:8a:1f:d5:56:cd:6f:21:
ac:4f:6c:81:7d:6a:30:0d:7b:05:cc:22:fe:13:e6:
d0:ed:ba:ba:75:8a:bf:79:71:06:c6:13:ff:47:be:
13:ce:93:d5:b6:fa:93:0a:01:60:46:50:58:5f:f5:
ee:3d:fd:39:b9:df:51:b2:0f:57:ef:3b:84:ed:70:
a5:58:17:cf:f4:db:71:d5:64:78:49:a3:f5:ce:54:
77:cd:b8:28:a0:cc:da:15:b3:a0:54:f6:f1:d4:cc:
ff:a7:b1:9b:1f:14:9f:db:dd:62:5c:2e:33:e1:64:
f4:12:f9:05:e6:6d:cf:db:f1:c1:1a:63:7c:64:7c:
f9:ba:ad:0d:30:b8:76:42:b9:fc:4d:8f:c0:93:04:
56:17:02:9e:a4:f4:7e:ef:a7:98:c6:e4:df:00:07:
75:b8:60:20:6f:ec:6e:5a:86:ce:62:f5:6d:3c:1f:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.144.0/22
185.174.28.0/22
IPv6:
2a05:9bc0::/29
2a0b:8100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206259
Signature Algorithm: sha256WithRSAEncryption
0b:d0:21:2c:f1:08:ff:11:5b:e8:e3:9d:82:ac:7f:8d:77:9a:
4f:1c:a5:d4:52:1d:6a:63:3f:99:4c:77:91:27:bb:3f:6b:3b:
91:36:16:97:44:13:05:82:b1:8f:05:48:f9:ce:33:27:76:de:
b8:66:8e:bf:d5:89:bb:97:16:84:15:b6:22:e5:d4:a7:69:0c:
5e:b1:f7:c7:6e:f1:52:e4:81:2e:fa:53:a9:98:0c:b6:09:cc:
be:f4:51:e6:3b:ad:fc:a2:8c:e9:49:a0:69:97:8c:c3:fd:13:
a7:8d:76:78:86:71:22:06:a6:1c:d7:f0:d6:9e:fb:05:f2:51:
60:40:ab:c0:55:19:d7:c3:06:20:28:99:6b:6e:03:40:65:a6:
da:8d:04:46:8c:6c:99:be:b7:44:f6:34:e0:82:4d:e4:fd:58:
41:44:34:c1:2d:f1:df:7b:5f:83:6f:3a:86:7e:7b:ea:31:ca:
20:8c:65:51:4e:45:b0:35:8a:a8:0c:83:ca:be:98:e5:41:42:
27:8a:b5:52:ec:8d:a3:03:ad:40:3b:17:0b:26:31:af:52:08:
37:c0:12:ac:a0:b0:70:af:cc:b0:fc:58:f7:f8:10:14:7b:74:
0b:03:83:02:5a:5a:70:c8:46:fc:2a:db:cc:09:00:ca:65:c6:
d6:0e:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 8 07:07:24 2023 by rpki-client.