Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
File: nkz1EkerV_Um84ByWaeNKwJZBgM.cer (raw, json)
Hash identifier: oNyuYOV+wM86Ca3aLC+x4B8tT0qIlEisujH3xQW9IBE=
Subject key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDBDFA03126083B1CD6C264EAB9A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.62.180.0/22
IP: 2a07:dc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:db:df:a0:31:26:08:3b:1c:d6:c2:64:ea:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:59:21:5b:04:33:81:56:67:b0:c7:7b:23:
97:3a:12:a8:9c:7d:cb:38:c7:ce:b6:ff:24:ac:a3:
2a:ab:7e:b4:99:f2:53:2c:16:d0:d9:27:d2:32:4d:
53:1b:f5:ac:a0:19:08:35:a2:ab:ad:cd:af:9f:24:
d0:69:b6:5e:7c:37:81:95:23:0e:79:9e:09:8f:69:
68:e1:fa:11:7d:e0:70:97:88:d9:5c:23:3a:6c:4c:
73:4c:c2:8c:c3:b8:39:f1:f3:ff:5b:a6:dc:a4:0b:
bb:d4:d6:3d:69:fd:51:61:e5:2e:82:b9:50:07:29:
40:0f:0b:ec:45:50:dc:af:3c:06:ef:e3:45:23:b6:
99:0d:df:42:b9:46:57:0e:a2:43:b2:e4:43:f1:b3:
38:c5:85:a8:ae:f3:2b:4f:16:d1:07:34:6a:e9:53:
90:0c:d6:67:ea:b9:19:48:5d:09:e2:08:dc:43:48:
8b:f4:f7:63:3f:13:3f:cc:28:a0:65:1c:a4:ca:c1:
9d:b7:e0:7d:69:67:cd:29:bb:c9:17:e0:64:a0:c8:
4d:5e:93:a7:de:17:e7:50:2e:5c:b4:92:b1:10:e4:
68:ee:08:67:be:4d:a6:64:39:5b:bc:e5:9f:ae:2a:
00:82:02:1e:36:ce:49:c5:d3:a0:f4:47:40:94:3f:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.180.0/22
IPv6:
2a07:dc00::/29
Signature Algorithm: sha256WithRSAEncryption
15:67:62:65:fa:3c:79:ca:47:7b:52:22:a4:15:84:bf:b1:77:
35:9a:d8:05:f8:7e:4d:0e:aa:a3:15:db:12:69:85:0c:2e:88:
ab:4c:6f:8e:84:6b:d6:9a:d9:9a:e9:ef:b6:66:07:e9:e4:e9:
0f:2f:b1:4c:90:09:54:18:bc:4b:09:76:f7:38:f6:7d:c1:d0:
88:0b:56:c6:ae:a0:96:7e:88:96:12:65:04:1d:ba:3d:ca:83:
de:a0:64:91:41:52:60:4b:b0:60:50:4d:aa:54:d4:dd:a9:32:
40:2d:af:2e:a8:8d:be:53:c2:12:03:c4:25:04:5a:d0:f6:17:
f1:58:2c:41:a5:dd:f2:dc:70:6c:36:95:3a:11:f6:e4:0c:2a:
bd:d2:f8:35:d8:ff:84:d8:b4:8d:f9:81:08:12:54:a4:92:b4:
6b:67:0c:e7:cc:d9:0d:aa:57:2c:a4:8a:ac:5d:c6:6d:7c:55:
59:c6:21:ee:cf:43:04:12:18:7c:9e:90:76:43:39:56:1c:de:
ca:12:a0:73:02:e2:5e:33:26:06:d8:d7:3f:d3:1e:8c:04:8f:
43:10:87:22:18:c3:ab:b2:29:14:73:a2:07:f5:23:74:e5:54:
64:59:4d:49:44:ed:20:67:58:14:db:08:da:4d:c7:a5:44:2c:
ba:0d:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:18 2024 by rpki-client on console-ams.rpki-client.org