Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.cer (raw, json)
Hash identifier: Lr5B3UfB4TWvt0ny9IbNBgXJb6GS7YJ4tsEIWOzC+Gk=
Subject key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC4EED84D6A2B7C536E31F85EBC174
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211974
IP: 185.203.220.0/22
IP: 2a12:9740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4e:ed:84:d6:a2:b7:c5:36:e3:1f:85:eb:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:a5:7e:60:3e:24:62:d2:1a:fb:3d:01:34:
73:7f:e1:e0:2f:69:b6:bf:0a:d2:0f:77:f9:a9:ab:
01:b5:17:0b:31:e9:d8:ab:df:7d:ba:2f:60:02:5b:
d4:1a:90:32:f2:8c:4a:59:23:39:0b:f7:dd:d8:28:
d1:82:3b:c6:61:51:56:07:37:d6:3b:e6:5a:62:ec:
fb:2c:72:b6:2e:81:5d:af:47:55:38:ef:e9:00:77:
ac:9f:85:00:e7:15:9d:61:d2:86:b0:78:51:5d:08:
93:13:b3:e7:aa:dc:2d:30:11:97:4c:32:ec:22:71:
67:55:ac:cb:99:20:1e:63:ab:36:fe:5c:9c:09:67:
3b:3d:7a:07:b6:0f:29:16:0e:0a:94:03:41:d2:3f:
45:e1:e3:3b:36:f1:b7:eb:48:bf:a9:dd:d8:0d:89:
e5:32:a3:89:4b:e4:cc:87:12:c6:8c:7a:ad:42:e4:
41:e8:95:0b:f9:85:0f:70:1a:b6:ca:2f:9f:f0:de:
8c:fd:02:5f:5a:84:d3:4a:53:42:1a:39:82:d1:4a:
14:4a:34:36:14:94:d8:d0:6e:fc:04:c5:20:51:e9:
8f:4b:7d:e0:14:07:aa:19:c6:8d:fe:1b:65:2b:41:
54:60:61:f6:53:97:a7:0a:28:87:88:ea:cb:f3:f0:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.220.0/22
IPv6:
2a12:9740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211974
Signature Algorithm: sha256WithRSAEncryption
97:46:12:d0:82:37:4e:41:70:c5:6e:78:ad:4b:0c:9e:32:72:
86:53:29:4d:bc:79:98:44:bc:42:8e:ea:c8:e5:80:05:3a:c3:
18:eb:6a:19:d5:ac:e5:75:37:a5:f5:42:d8:96:68:23:07:64:
73:7d:66:4f:e4:ff:5a:2f:ad:8b:06:e0:8f:e4:ae:40:30:43:
6c:6e:af:31:7a:02:34:89:26:72:32:bb:47:e9:fe:0b:75:ec:
46:57:14:23:e1:b5:84:79:a9:94:74:c2:d7:55:c4:ee:5a:20:
7a:86:20:72:63:c5:66:f2:16:f8:ff:78:c9:45:36:41:f2:9d:
3a:6f:ae:a1:93:aa:6c:ce:41:63:bd:17:55:65:b7:0b:8e:98:
30:c5:6c:5c:8e:b1:80:7d:0b:ef:ea:72:c4:f1:6b:41:b2:ad:
db:80:ed:02:5b:da:82:1d:a3:dc:13:a7:ef:82:b5:cf:44:96:
20:45:0a:34:d7:1b:bc:ae:80:9c:2b:37:6b:fc:80:cf:9d:93:
77:be:6b:ed:85:c3:f8:11:cc:80:28:42:00:b6:41:67:1e:ef:
01:13:5e:ef:2c:cd:e4:38:cb:8c:58:7f:4b:0a:e3:14:a5:e8:
ed:2d:12:f0:02:90:7e:c1:26:c3:9f:c7:34:91:e6:31:bd:6a:
97:ce:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:13:32 2024 by rpki-client on console-ams.rpki-client.org