Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer (raw, json)
Hash identifier: nG4rk8Jwu+mSkEpjlOfTvlWlJnBQOBTevpLG9fm1ti0=
Subject key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC7CA98CC56A8FF89BCCB6AF0762DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30736
IP: 82.103.128.0/18
IP: 2a00:9080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7c:a9:8c:c5:6a:8f:f8:9b:cc:b6:af:07:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:23:f8:b2:cf:97:61:3b:1a:50:77:56:84:
6d:df:c8:cc:99:f0:2e:d6:fe:b9:12:3c:0e:4a:c3:
c9:e9:e7:ec:9a:ac:02:43:8c:22:8a:d9:16:46:8c:
3a:c3:c7:ec:a9:60:11:aa:29:ef:05:58:e1:2c:c1:
cb:ad:7b:75:63:64:45:85:d5:ba:98:3b:5d:5d:15:
92:5f:63:39:1a:23:ab:c4:58:22:83:72:14:74:29:
83:e2:03:cd:60:dd:d4:4c:95:b7:25:57:b0:c2:d0:
4c:fe:4e:f0:ed:59:4c:67:04:e2:1e:80:18:39:01:
f7:28:cc:67:94:b0:7e:d6:e7:8a:db:1e:1e:fc:97:
03:55:07:38:6c:7f:b0:86:8e:51:f4:83:f2:f4:c4:
4d:6f:e1:66:f7:ff:01:20:af:5e:b7:d8:34:c9:a8:
bb:8f:dc:27:7b:d5:24:c3:a0:71:5e:5e:36:23:7d:
e1:fe:da:cd:32:15:7b:59:fe:3e:78:1d:89:91:e1:
f0:da:39:37:5b:90:a5:36:6c:1f:33:68:33:12:6f:
bc:95:17:a1:65:16:f3:73:67:0e:aa:46:7e:3e:ec:
96:0f:11:47:01:e3:a7:64:75:0c:4e:b9:64:d2:94:
34:cf:68:ec:ec:5f:67:0d:a9:6e:98:4c:23:d3:b2:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.128.0/18
IPv6:
2a00:9080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30736
Signature Algorithm: sha256WithRSAEncryption
29:f4:ae:f8:a5:da:1f:d4:51:8c:d4:15:f6:5e:85:1a:5f:d8:
8b:2b:5b:fd:26:f3:e4:cf:da:81:a6:6a:f5:42:9a:b8:28:91:
8f:0f:7d:ff:a8:c8:3d:44:9f:33:1c:b6:ec:c1:63:9c:10:04:
c5:ab:e3:d0:97:c3:d1:24:4f:17:12:68:fb:39:f0:00:13:6d:
2c:a3:80:ac:ec:c9:93:a0:45:91:12:4b:eb:ef:13:fe:f9:af:
be:eb:d4:44:25:9c:8c:47:bb:e9:33:cd:72:54:6a:31:73:6e:
ab:b7:0c:59:3c:71:fe:e6:09:3b:2f:3c:74:c0:b2:b3:0c:af:
3e:fd:50:ed:cb:8a:0d:58:f7:87:36:69:66:62:37:57:c6:1b:
c7:58:9f:74:9f:48:00:96:30:cc:37:e7:1e:2d:f6:6c:1b:cc:
22:58:f4:11:d7:d2:ff:1b:a6:fd:3a:16:02:fd:26:c8:ae:6c:
08:4e:4a:6c:3a:72:36:2e:3b:d9:04:0c:6a:8f:f1:81:18:eb:
f2:1c:05:18:f8:5e:95:7d:8e:76:17:3c:3e:2c:1a:40:5f:d5:
9a:bd:14:9c:0c:22:c0:22:bc:bb:f5:f4:c0:2f:c1:39:65:85:
69:d6:dc:48:0f:97:09:59:8b:1c:74:8b:7c:12:56:16:82:2e:
a2:2e:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:37 2024 by rpki-client on console-ams.rpki-client.org