Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer (raw, json)
Hash identifier: z8lFvwtO/XOrewtmnFgsMbiFNlUQ/fq2nGQodsjsPZg=
Subject key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BA5B0225DF604B7B5464C6C84AF7FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:31:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208486
IP: 103.253.140.0/22
IP: 194.147.226.0/24
IP: 2a12:7ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:5b:02:25:df:60:4b:7b:54:64:c6:c8:4a:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:49:80:c5:bd:f6:70:b7:41:03:86:0e:ec:
13:00:d8:0d:76:43:85:82:82:18:2d:5a:4c:39:ae:
c4:7f:87:fc:4f:89:e7:ef:f8:83:8a:62:57:25:49:
96:47:22:9a:8d:86:d4:e9:17:09:a5:30:44:70:76:
ce:24:40:47:17:af:65:a1:ca:24:cb:11:2c:05:bc:
10:2c:e4:c7:55:02:9b:c1:50:53:c8:83:cc:11:6e:
c8:9b:65:d7:8d:c0:d0:cb:1c:e4:18:d1:2c:0e:2f:
06:2e:28:b3:eb:2d:43:09:20:ac:97:82:b4:81:b7:
fd:5d:c0:18:f9:4a:49:bb:12:8a:69:6b:ed:00:ee:
7b:b3:73:92:e8:35:b5:5b:af:d7:d3:de:1e:e9:73:
9c:17:45:02:ad:d0:09:4f:ea:d8:d6:96:19:46:ff:
66:05:25:08:f0:89:55:9f:4f:31:b7:6f:4e:77:e6:
63:95:5b:93:b8:64:d8:59:2e:2b:eb:85:29:df:48:
9d:fc:38:a1:f9:72:11:76:26:ea:0c:73:4f:61:a9:
67:66:38:f2:6b:3e:31:33:96:bc:19:82:01:0c:d7:
36:fb:e8:47:ea:f2:ed:eb:a6:cd:56:45:eb:44:a3:
da:f1:11:0b:a6:de:e7:9b:ca:8f:a9:df:5b:4a:65:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.140.0/22
194.147.226.0/24
IPv6:
2a12:7ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208486
Signature Algorithm: sha256WithRSAEncryption
99:8d:36:87:b4:fc:5a:96:bd:42:c4:f3:ea:ec:ef:8d:0c:0d:
ff:e1:d8:57:2f:fa:ab:cb:b2:c9:1a:dd:44:99:5c:af:d0:19:
33:e1:8b:df:e5:fc:b4:85:0f:14:ab:96:95:57:48:7c:2b:ab:
21:f9:8a:eb:56:de:a2:4c:2f:48:a7:1c:7d:e7:f1:cc:83:b9:
d4:98:d4:01:12:45:19:ba:b9:22:05:e8:3e:1b:75:b7:40:f3:
1f:9b:a4:72:ff:65:f7:20:1b:9f:4d:e7:36:77:8e:bb:c8:ad:
0c:2d:22:62:ab:da:25:94:88:57:14:cc:33:a8:db:41:64:9d:
91:02:17:d6:d1:46:c1:73:21:71:8f:30:3a:22:be:cd:44:e4:
eb:8c:aa:63:1f:91:5f:d8:92:2e:cc:68:15:03:97:e0:a6:8d:
d4:d6:1a:da:2e:32:32:c8:bf:39:ba:82:28:fe:58:22:8a:d1:
12:63:88:ec:36:14:db:ea:52:fb:74:00:bf:d1:bc:70:79:64:
17:4d:31:f8:6d:d1:8f:a8:24:21:7d:f3:05:3d:c2:33:9d:67:
1a:15:f7:28:cc:88:3d:c1:75:65:1d:fa:8c:5a:cd:4e:8f:91:
2d:fa:21:0a:59:f3:2f:54:6b:db:32:ef:ef:56:ce:0e:c6:8a:
f4:1b:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:17:10 2024 by rpki-client on console-fra.rpki-client.org