Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.cer (raw, json)
Hash identifier: Xuu7Nj5ABC+HmN+zulv6CBkuwqbBy83Q484LhCpWIlo=
Subject key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE6DF04F86037E1B6838746EEC3159
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209753
IP: 212.46.40.0/24
IP: 2a12:cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6d:f0:4f:86:03:7e:1b:68:38:74:6e:ec:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e6834ae35630a04c78f277605252678fb645c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:d1:49:de:68:1b:33:6a:d8:66:79:d4:3b:
17:b9:6a:38:fb:6d:78:fe:2c:26:57:39:b5:6f:7d:
8d:96:36:55:c0:55:12:02:f8:f3:f3:85:2e:f7:6f:
79:d6:7e:5e:92:9f:b5:3d:f8:53:0b:90:f3:2f:d3:
ee:c2:79:89:23:3c:e2:c9:74:a0:6a:68:ac:e5:fa:
a7:36:87:33:fd:a3:27:13:41:20:1f:79:0e:9b:5d:
6f:cb:ca:a1:fe:96:1e:87:a7:57:61:64:b4:86:fc:
e3:3a:d2:be:9c:58:40:9c:86:59:81:61:7a:b2:1c:
a5:53:60:c9:24:72:dd:40:68:69:39:3a:42:03:88:
b1:e5:10:a9:bd:38:05:d5:04:ac:eb:ca:2b:0a:9f:
0a:4a:c3:09:42:e9:df:a3:77:d7:52:5d:d4:eb:88:
91:4f:60:06:2a:49:02:85:3f:10:80:e9:13:d2:e0:
9f:c4:fc:01:b4:3d:e4:d8:b2:98:20:04:dd:64:4b:
bc:2f:de:22:f9:b7:9a:00:c9:36:b6:e3:41:be:aa:
9a:57:b9:d9:00:e8:21:27:d7:39:12:23:29:4a:cf:
ed:16:9b:3f:93:9e:75:35:7e:75:c5:d1:90:9f:61:
a5:82:6f:c6:dd:1b:ad:03:0c:76:0e:c6:98:8e:a0:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.40.0/24
IPv6:
2a12:cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209753
Signature Algorithm: sha256WithRSAEncryption
32:db:31:66:4c:2f:79:69:34:92:e1:77:db:2a:ec:a3:4d:d1:
79:d5:e1:56:81:94:87:4b:1f:16:fe:e5:f0:45:15:52:ca:32:
a5:9a:db:1e:32:d9:b8:46:c0:ef:73:d8:93:02:01:a4:22:46:
1f:75:61:d4:90:f8:be:26:ae:d3:ed:ab:43:19:8d:c5:b2:60:
62:aa:39:3f:e6:c8:62:c2:ca:82:7c:2a:2a:a1:e2:4b:6d:1e:
84:7b:d1:40:e4:28:0e:d9:1d:44:b3:90:b1:40:e9:d2:8b:44:
bf:69:37:1a:66:24:f9:64:ab:2b:35:03:9f:1a:1d:73:8a:15:
a5:81:48:c1:14:7d:a9:c3:4c:9c:2d:33:2a:d1:c3:9e:f5:25:
f7:dd:06:19:d5:05:fd:63:c2:bd:01:c4:87:7b:c6:ef:0d:4a:
15:8c:d4:a4:78:fe:56:c1:a5:77:95:dd:3b:7f:db:40:62:3c:
e1:01:46:c6:6c:4c:d8:f3:bb:bf:d1:cc:c8:20:2e:1f:9a:7e:
ae:ae:45:90:d7:8c:f5:02:a3:6c:0b:5c:f2:cb:86:c3:1a:fe:
ce:59:12:6b:cc:fb:a6:58:a9:9f:9d:fa:a8:87:83:09:a0:6a:
11:af:95:9b:73:87:8a:39:0c:b7:5c:4c:a2:ee:c9:1f:43:cd:
0e:87:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:19 2024 by rpki-client on console-ams.rpki-client.org