Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer (raw, json)
Hash identifier: nWYEzVkAFlQEhTRy1IZGJkQOMRfWaLvJJVZRy7UzeD4=
Subject key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E291006E5A665C3683BBF3521F384
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.146.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:29:10:06:e5:a6:65:c3:68:3b:bf:35:21:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d8ada352982a319b54d5e483d34426346733ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:29:43:26:63:3d:2c:9d:e4:87:88:bc:74:
d1:d8:c3:60:87:4c:ff:15:9c:22:e6:0c:f4:77:d0:
ac:b6:4f:4f:b8:20:16:90:2f:5e:8c:e1:86:a1:1e:
ce:a9:9b:3c:2d:01:d4:af:9e:0f:19:bb:bb:3e:b1:
9c:d1:c0:f9:71:b7:ee:c0:03:32:da:01:00:da:85:
ea:a8:99:65:6b:a4:2e:6c:a5:f6:1b:b1:cf:07:a2:
85:aa:dd:f3:34:79:90:15:db:9b:64:dd:6c:7f:7c:
50:d3:44:97:88:a6:30:fd:da:29:76:a9:9d:bc:6d:
cf:2f:59:96:41:8b:52:47:d3:df:5f:cd:b7:fe:5e:
7e:da:38:db:43:de:39:f9:32:fd:bc:1a:f0:8e:84:
f9:d5:72:0f:25:ab:49:87:06:34:4d:e9:18:65:52:
3a:c3:b3:06:c9:7f:da:c0:c0:9d:8f:28:72:df:dc:
c1:79:65:87:64:7e:f8:bc:ea:fa:00:25:08:53:9b:
01:b6:62:8d:20:30:df:05:99:14:d0:88:74:f1:ad:
24:e9:1c:47:c3:73:56:0e:e2:46:65:b7:46:d8:da:
b9:72:dc:10:7c:0d:c0:a5:14:a5:84:45:c1:d7:73:
0c:12:af:64:d3:03:8b:8a:0c:b9:d2:1b:1f:79:25:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:42:06:da:7f:9c:dd:66:ab:08:de:1a:31:33:9a:7a:15:1f:
0c:80:17:89:6a:9c:c8:dd:ae:01:15:0e:3d:35:e5:f8:bd:c3:
43:25:95:8c:3c:aa:bb:fb:1f:7d:c3:04:e4:e9:7e:6a:cf:27:
ba:5a:1a:8e:7c:9c:ba:37:4d:8f:d9:c3:66:5a:90:96:20:0f:
ab:33:d6:09:b9:95:1f:d9:4d:a5:8d:06:9c:10:f1:e3:c0:ae:
98:37:12:eb:63:3d:25:c5:55:b0:78:e1:cb:c2:85:dd:8a:41:
06:f5:ce:6e:a7:77:52:e3:93:ef:2b:21:ed:05:e2:ea:38:17:
3c:85:62:55:e7:7a:ec:6a:96:74:f6:98:5b:c6:36:1d:d4:fe:
78:c5:55:b8:87:e1:be:a4:83:d3:63:5d:0a:86:45:0c:71:da:
6b:af:85:4b:d8:3b:8e:d1:bc:7d:03:c2:70:e4:f3:e1:fd:ff:
b5:3c:b9:5f:9f:b1:93:15:46:9f:a8:ad:aa:40:11:77:40:bf:
5e:4c:f1:27:1e:04:24:75:fe:b0:ef:92:5d:0e:9a:1d:6c:f2:
34:f2:cd:94:de:bc:bf:95:77:0d:ff:96:e0:6f:18:c0:73:56:
e8:84:7d:53:3e:a7:57:98:60:63:c9:d5:76:90:46:b6:62:6e:
6e:7c:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:07 2024 by rpki-client on console-ams.rpki-client.org