Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
File: nmw2D-XITxlWHHrpu89PnPpHi08.cer (raw, json)
Hash identifier: 5x8DWnP+9VPHLYdBXy4D0insY2Bz7S8wgn6FXlQNTsY=
Subject key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E56482DAA366280BF8337CA907F99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49607
IP: 185.23.4.0/24
IP: 2a12:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:56:48:2d:aa:36:62:80:bf:83:37:ca:90:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:02:ed:0e:06:2a:4b:09:19:9e:de:ed:38:
af:9c:fe:ba:f2:e6:6e:28:53:b4:f6:eb:e1:c9:dd:
c7:d8:62:d6:2e:e3:48:e9:d1:dc:42:42:62:c4:bd:
a3:43:1c:27:e0:04:9c:64:2c:c4:83:b5:56:9b:f9:
a3:52:e6:f1:66:d3:83:a9:b7:6a:db:4a:c6:35:51:
a5:93:e2:37:dd:ed:48:19:cf:8b:54:13:b4:65:23:
9f:1a:d3:9d:b5:31:f5:a1:44:26:a9:c5:d5:20:b1:
65:b7:fd:11:b3:19:07:85:0a:50:00:45:a0:6f:77:
57:5a:45:9e:90:fa:79:71:c1:e8:ef:19:10:78:e9:
59:5d:bf:18:ea:f4:97:3f:26:30:cf:c7:89:46:44:
29:4d:40:02:f2:13:67:c0:62:d8:77:b6:79:79:c9:
fe:0d:ed:27:e6:ff:2d:9c:ce:23:cf:e2:61:be:ec:
58:aa:a1:fe:1c:f3:bb:3f:5c:b6:cc:92:93:a5:2b:
bc:85:d0:22:70:b0:ce:04:31:bb:98:44:b6:9a:77:
80:b3:16:f9:00:94:4b:ca:8a:69:0f:92:c7:f5:e1:
34:62:33:db:30:c8:e9:83:38:8f:26:54:8e:b3:f5:
3c:51:63:4d:0e:5f:2b:f7:12:f4:25:55:c9:cf:9f:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.4.0/24
IPv6:
2a12:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49607
Signature Algorithm: sha256WithRSAEncryption
84:8c:f5:77:3f:68:29:63:86:29:e2:ed:e7:dc:24:df:27:8a:
63:e0:b1:e2:71:a6:6d:f4:1e:1f:98:eb:34:34:06:fb:e7:24:
63:5f:cc:7a:b0:16:3f:4a:55:87:7e:54:5e:b8:7e:b4:4d:13:
cf:db:b6:eb:73:91:2f:30:ba:82:6f:b2:47:57:05:45:4e:58:
14:9a:ac:b7:e0:31:f8:29:bd:f0:eb:c8:cb:ef:97:84:ae:8c:
b7:87:e1:9b:f1:b2:58:77:c9:fb:1c:fa:50:0d:7e:8d:4c:03:
78:df:e6:a8:28:11:56:e1:ff:4d:18:c4:99:73:d2:2a:6c:94:
6e:15:86:3f:c4:94:0d:4b:07:3a:46:6a:6c:47:c0:0c:90:58:
f5:81:1a:4c:14:c4:3d:13:ab:36:0c:d2:fc:f9:fa:0a:66:2c:
bd:f3:0d:31:82:44:16:12:42:74:8e:22:61:91:1d:5c:5b:c1:
8d:c8:bb:f4:91:33:ae:f9:f5:9d:ca:30:4a:dd:98:15:fc:bf:
8b:ad:35:e1:1f:57:e2:26:97:6d:0f:22:4f:40:4c:5d:1b:3f:
8c:01:62:a8:b6:1f:2c:9a:bc:57:2e:d0:dc:da:75:b2:4f:48:
e6:58:f5:0c:9e:7e:2a:62:93:f2:37:61:27:36:cf:06:16:2f:
42:cd:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:57:55 2024 by rpki-client on console-fra.rpki-client.org