Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
File: nmh1g4EMwAZO207-QFf1phpV5ws.cer (raw, json)
Hash identifier: xdSO9HAxFQdIH3px1p6M4LV2fmy+Lo8AB9I1jRaiLuk=
Subject key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF76D019D83085030942AD5399C0E09EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 17:34:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197550
IP: 46.173.192.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:6d:01:9d:83:08:50:30:94:2a:d5:39:9c:0e:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 17:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:6d:a3:60:ff:15:15:1e:fa:96:17:fa:f1:
3b:0a:09:da:f1:c4:46:19:28:17:fd:ac:bf:bb:f9:
73:fa:b9:d2:01:a4:c1:b8:a7:af:1e:13:bc:9b:69:
05:1e:b7:4d:ea:51:f6:81:47:d1:a3:e2:48:9b:19:
8d:b1:0f:a6:a1:2e:7e:74:e4:7b:f6:ed:a7:1e:12:
cb:be:50:7f:4f:29:55:2e:70:52:75:42:2a:08:ee:
c4:03:04:a9:25:4e:15:29:24:f5:ec:13:ad:eb:48:
61:95:c2:76:ff:b8:71:e9:fc:36:47:ad:99:02:16:
01:2d:b1:e7:97:27:49:ed:a6:15:0b:99:da:9b:c2:
13:ec:5a:77:a6:bb:2b:a8:99:82:d3:a2:b1:dd:ef:
93:f2:a8:55:b2:4a:99:26:e8:4a:bd:d0:8c:dc:f0:
7e:7b:d7:4f:f3:ef:ed:a5:62:16:f3:30:ae:4d:52:
22:da:57:b3:6e:49:99:9c:26:2b:6b:67:17:b9:78:
1b:6a:e0:6c:2c:01:c4:45:8d:5e:ef:72:31:f7:54:
21:0e:7a:97:f5:81:cb:9b:d6:2c:8a:77:29:dd:01:
d3:a8:29:a1:c1:bf:67:10:76:eb:9e:58:f3:0e:06:
35:b2:a0:c2:cf:22:49:75:b8:53:e7:0f:d8:b1:fe:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.192.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197550
Signature Algorithm: sha256WithRSAEncryption
0e:63:e1:fb:fc:87:e4:c2:bf:c3:32:51:aa:38:02:84:ab:55:
ae:f4:1d:21:5e:ca:ac:3f:44:22:9c:d0:fe:26:cb:f5:97:1e:
a4:89:b8:5c:6c:fa:6c:fa:64:48:ef:fb:cd:b9:8d:26:9c:2b:
5c:37:e7:50:69:2e:f1:da:94:0e:3a:5b:3e:5d:1d:bd:10:83:
5c:79:e4:6a:1d:ea:cc:c9:e8:30:60:9b:83:77:ec:71:dc:09:
2c:c4:a5:8a:2e:bd:c3:ac:d5:7d:2c:ce:ae:ea:36:12:a5:c2:
d0:92:b3:b9:42:10:42:c0:6f:f1:4c:eb:0e:2a:fd:f3:3f:46:
92:14:bf:12:87:66:b3:2b:7b:f2:f0:24:15:3d:14:3d:21:74:
85:64:24:3b:00:ba:63:e3:e0:0c:12:d8:ac:11:48:d9:52:34:
3f:ff:b5:31:b1:d3:c6:d2:5c:7c:42:02:a0:e1:b9:0f:20:12:
5b:05:d9:06:d1:92:2e:2e:f8:12:0a:d2:d3:32:31:6f:56:07:
4e:90:12:01:fa:c9:d7:94:6d:fe:3d:14:6b:86:c7:11:f8:6f:
73:48:b2:c9:14:bb:9d:35:1c:e9:52:ba:fd:a7:ae:f1:30:d3:
c7:b3:37:13:c7:18:fc:81:e1:2b:7c:a1:a5:51:98:83:d7:8d:
11:bc:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:44 2024 by rpki-client on console-ams.rpki-client.org