Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
File: na669vl-yTdN9sFJL1nV8Tqd0Ag.cer (raw, json)
Hash identifier: aGzlMnScMUbuLQib1n1ZrBeaSAAS8cxThqs18MBOkj4=
Subject key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3C0FCA147F857A6705574AD6BDEDDFAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 08:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210467
AS: 215320
IP: 5.172.183.0/24
IP: 89.47.246.0/24
IP: 193.177.136.0/22
IP: 2a0d:3c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:0f:ca:14:7f:85:7a:67:05:57:4a:d6:bd:ed:df:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 08:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:7d:4f:ca:49:3d:e0:ba:31:df:1e:9e:f6:
a2:ca:9a:70:91:98:42:ca:c2:1b:20:c8:cb:d2:fa:
b7:ce:38:c8:5f:ca:3d:55:41:eb:ac:1b:d8:23:ac:
a9:54:01:60:7f:7e:0c:f9:9a:87:b7:0a:5d:aa:9d:
e0:f1:8b:76:d9:53:c7:d6:a6:b6:8d:66:66:91:68:
0a:0d:e4:fb:4a:0b:7c:45:e3:91:4d:2d:b2:b8:19:
a1:8a:75:25:bc:ae:27:5f:14:5d:7d:e2:2e:21:7e:
2b:a7:e6:ec:a5:ac:74:6f:53:ee:be:77:d3:33:f2:
6e:57:0a:5b:28:62:34:d0:58:ee:e5:c8:23:74:4d:
20:81:b4:81:02:84:b1:a4:55:dc:19:05:59:1e:86:
44:cb:24:e8:bc:52:4a:e4:80:b9:77:e8:25:68:ab:
38:d4:34:73:48:18:6d:0f:e9:27:7b:17:7e:2d:bf:
91:05:69:94:0a:c4:a0:aa:47:6b:f5:c2:eb:bc:36:
a7:47:ba:9b:42:5b:d3:0d:58:7d:e5:c7:69:1c:82:
2b:af:44:22:53:5f:fc:c3:3d:d6:bd:36:22:82:e3:
0f:43:d5:e9:6d:8a:15:f7:4e:c9:28:3d:a2:70:2b:
b8:a4:79:cd:c0:68:0b:2d:bc:eb:61:56:10:3b:ab:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.183.0/24
89.47.246.0/24
193.177.136.0/22
IPv6:
2a0d:3c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210467
215320
Signature Algorithm: sha256WithRSAEncryption
8a:ff:80:21:8a:44:41:c3:ca:33:04:6a:db:98:43:c6:43:da:
05:27:ad:3f:11:26:e1:78:10:02:91:bb:1d:c3:a8:9c:14:4c:
25:d3:b4:fc:d6:09:36:c0:12:1d:0c:1c:17:e2:94:a8:f1:ce:
99:32:ca:df:23:ce:45:51:85:d3:49:e1:dc:58:65:b6:db:fc:
d2:6a:ac:6c:6a:3a:f2:24:ad:7b:78:5e:26:6f:aa:3d:ae:73:
c9:01:47:91:74:c0:af:93:12:49:d7:c8:a4:a1:57:4c:8d:cd:
03:bc:ad:14:b8:dc:e7:f2:8f:75:1d:11:38:ff:2f:4c:ad:6b:
34:11:c3:df:df:f5:31:38:48:5a:ff:75:e0:e4:10:da:55:1e:
08:e4:33:f1:1d:41:28:6e:e4:a4:0d:09:27:f2:63:9e:43:55:
1a:ae:4d:d0:ee:ac:60:9a:43:48:1c:85:f9:5b:6a:40:2e:df:
32:4b:09:b7:7a:2e:5e:44:6d:51:92:72:c8:5e:94:10:d2:91:
47:ea:f6:0f:21:d4:66:cf:5e:2c:27:b9:42:89:c3:67:e2:97:
8f:a6:f9:f8:e7:22:4e:18:ff:f3:1b:84:d7:78:2c:30:b5:de:
17:3c:b2:c7:e2:77:01:f2:6b:63:95:2f:48:67:ee:3b:36:98:
c6:44:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:59:53 2024 by rpki-client on console-fra.rpki-client.org