Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer (raw, json)
Hash identifier: Uiq9LwGQF0sEluCsjURNEzI15DK70hxKCd9M5JdXmeA=
Subject key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29F2B1C7BCEB4F2CF2B7348CF34AE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.90.43.0/24
IP: 193.218.203.0/24
IP: 217.197.102.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f2:b1:c7:bc:eb:4f:2c:f2:b7:34:8c:f3:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:59:f4:41:16:cc:6f:6b:c5:50:cd:a8:34:
94:75:68:28:f4:ee:c2:61:16:dd:ce:35:75:43:49:
0e:8e:6d:d3:0f:8a:a1:54:c6:fa:3d:af:f1:b3:5d:
e3:31:0d:9f:d6:cb:33:70:b2:b2:a2:d7:e3:32:a2:
2e:6d:94:f2:95:05:6a:7a:f1:f2:e6:4e:88:1a:0a:
51:c1:69:38:c5:73:9d:c9:0f:5c:47:8d:ec:2f:a8:
e7:ea:37:76:27:ea:01:62:ea:f8:47:90:45:7f:ae:
bd:c1:e7:0e:fb:06:26:d5:69:db:db:20:d3:f4:be:
95:f4:c0:cf:a4:75:a2:1c:4b:e7:d9:4b:5f:c4:45:
38:54:b1:d1:23:ea:06:ae:66:71:09:62:e8:21:93:
cb:78:d0:10:a2:3e:7d:cc:d3:4e:b1:13:8e:94:c1:
8d:21:0d:47:25:ea:c3:12:4b:ca:3e:f8:63:80:dd:
96:db:4a:11:39:c9:64:13:b4:36:c7:5d:0d:fa:b5:
04:9d:78:c8:c2:b1:80:c2:33:15:5c:f6:83:96:b6:
df:13:ff:6b:2f:9b:b1:09:6d:67:7b:eb:20:53:0d:
9a:e6:e2:43:7a:54:c3:a3:29:b3:97:3c:eb:cd:5e:
78:5b:23:28:85:13:2d:05:c3:a5:b8:61:4f:54:9c:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.43.0/24
193.218.203.0/24
217.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e0:c7:76:3a:f5:9f:0b:38:f3:7e:0a:86:5a:47:5c:3a:33:
02:31:57:02:de:57:3d:aa:1d:7b:39:81:d8:2c:29:2f:08:ba:
cc:fd:76:29:d8:93:8a:38:dd:d9:f9:c8:17:4a:9a:44:16:eb:
43:55:9c:25:1c:78:8c:ce:b0:a3:96:c7:ab:75:81:a9:43:a8:
76:6e:1f:6f:75:89:db:0f:7b:71:9a:93:0b:ca:ca:87:41:13:
bd:a2:ec:94:2a:e8:f6:0e:bc:95:0d:72:19:e3:5a:16:fa:bb:
40:ae:ac:f2:37:88:4a:ef:14:6d:9e:28:46:ee:57:bc:1d:73:
8c:72:59:99:19:5d:d8:05:5a:ea:cf:cd:2d:e9:30:68:a2:9e:
16:76:11:0f:17:de:77:08:bd:13:fe:d0:db:59:39:c6:da:2e:
29:3f:70:67:b2:a9:84:b4:b7:4a:8e:95:b3:96:7a:7f:8b:b2:
7b:3f:92:c8:5f:8b:02:e1:21:28:0e:17:61:0d:2b:6f:2d:b3:
2d:9e:ba:63:41:a5:89:4c:04:6a:61:cb:7a:c4:94:de:bb:5b:
0a:5d:e0:cd:d0:c6:36:13:c8:b6:c8:a5:20:e1:d0:02:50:83:
68:fd:02:bb:3a:2d:e4:ff:8a:20:a1:f2:2f:10:5c:cb:4a:33:
a7:5e:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:37 2024 by rpki-client on console-ams.rpki-client.org