Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
File: nmw2D-XITxlWHHrpu89PnPpHi08.cer (raw, json)
Hash identifier: Pg2f2EUmJ8hlyC/LZJQqD3x7BbLc/HXIKZNGBo3rvEg=
Subject key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6BC794B788F18EB3F7E837B10DC0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49607
IP: 185.23.4.0/24
IP: 2a12:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bc:79:4b:78:8f:18:eb:3f:7e:83:7b:10:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:02:ed:0e:06:2a:4b:09:19:9e:de:ed:38:
af:9c:fe:ba:f2:e6:6e:28:53:b4:f6:eb:e1:c9:dd:
c7:d8:62:d6:2e:e3:48:e9:d1:dc:42:42:62:c4:bd:
a3:43:1c:27:e0:04:9c:64:2c:c4:83:b5:56:9b:f9:
a3:52:e6:f1:66:d3:83:a9:b7:6a:db:4a:c6:35:51:
a5:93:e2:37:dd:ed:48:19:cf:8b:54:13:b4:65:23:
9f:1a:d3:9d:b5:31:f5:a1:44:26:a9:c5:d5:20:b1:
65:b7:fd:11:b3:19:07:85:0a:50:00:45:a0:6f:77:
57:5a:45:9e:90:fa:79:71:c1:e8:ef:19:10:78:e9:
59:5d:bf:18:ea:f4:97:3f:26:30:cf:c7:89:46:44:
29:4d:40:02:f2:13:67:c0:62:d8:77:b6:79:79:c9:
fe:0d:ed:27:e6:ff:2d:9c:ce:23:cf:e2:61:be:ec:
58:aa:a1:fe:1c:f3:bb:3f:5c:b6:cc:92:93:a5:2b:
bc:85:d0:22:70:b0:ce:04:31:bb:98:44:b6:9a:77:
80:b3:16:f9:00:94:4b:ca:8a:69:0f:92:c7:f5:e1:
34:62:33:db:30:c8:e9:83:38:8f:26:54:8e:b3:f5:
3c:51:63:4d:0e:5f:2b:f7:12:f4:25:55:c9:cf:9f:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.4.0/24
IPv6:
2a12:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49607
Signature Algorithm: sha256WithRSAEncryption
14:1a:2c:43:5f:56:44:b6:ed:27:3e:0a:ed:77:74:23:c6:57:
c0:6a:3d:81:73:46:e9:83:42:c7:2a:74:79:74:a9:7e:18:f2:
01:ab:8d:a2:c4:cf:30:47:b7:f9:4c:44:8f:24:1d:59:5e:2c:
b6:29:fe:41:7a:18:c5:cf:c1:ce:2e:99:47:58:9b:0e:26:75:
eb:bc:99:72:63:06:63:6a:ea:72:29:d4:16:74:c6:81:51:f8:
5a:98:d9:93:19:1c:63:7a:ca:e7:fd:73:dd:69:5f:8c:15:2e:
ed:d8:69:3c:fe:cb:fa:f0:09:29:39:79:a1:e0:85:c6:ec:4c:
08:bd:84:9f:5c:39:ff:93:84:e5:c7:e5:64:e0:e1:a0:ab:07:
81:6c:f9:cc:7c:fc:b9:cd:11:e5:25:b1:56:f8:55:42:93:e8:
0b:d0:af:97:3a:27:01:38:f8:11:f5:bc:52:99:d3:a9:54:ac:
11:86:50:ee:87:e2:a6:01:d2:4d:3a:fe:c6:ed:74:a0:15:ec:
5e:78:c5:7a:5d:0e:a8:e2:37:2a:d2:ef:c9:7f:02:db:79:3f:
48:11:85:20:3a:51:cd:c0:a2:b0:0f:b6:85:42:d6:fc:54:6c:
24:e4:08:11:8d:86:77:e8:46:80:4a:2c:f1:64:7d:6a:0f:35:
7f:c2:2d:ab
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1rx5S3iPGOs/foN7ENwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZjMzYwZmU1Yzg0ZjE5NTYxYzdhZTliYmNmNGY5Y2ZhNDc4YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEoC7Q4GKksJGZ7e7TivnP668uZu
KFO09uvhyd3H2GLWLuNI6dHcQkJixL2jQxwn4AScZCzEg7VWm/mjUubxZtODqbdq
20rGNVGlk+I33e1IGc+LVBO0ZSOfGtOdtTH1oUQmqcXVILFlt/0RsxkHhQpQAEWg
b3dXWkWekPp5ccHo7xkQeOlZXb8Y6vSXPyYwz8eJRkQpTUAC8hNnwGLYd7Z5ecn+
De0n5v8tnM4jz+JhvuxYqqH+HPO7P1y2zJKTpSu8hdAicLDOBDG7mES2mneAsxb5
AJRLyoppD5LH9eE0YjPbMMjpgziPJlSOs/U8UWNNDl8r9xL0JVXJz5/i4QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJ5sNg/lyE8ZVhx66bvPT5z6R4tPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2QyMjMz
Yy1hNzQxLTRiZDktYjZkYi03ZWQ5OThkZGI4NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZDIyMzNj
LWE3NDEtNGJkOS1iNmRiLTdlZDk5OGRkYjg1YS8xL25tdzJELVhJVHhsV0hIcnB1
ODlQblBwSGkwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuRcEMA0EAgACMAcDBQMqElDAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDBxzANBgkqhkiG9w0BAQsFAAOCAQEAFBosQ19WRLbt
Jz4K7Xd0I8ZXwGo9gXNG6YNCxyp0eXSpfhjyAauNosTPMEe3+UxEjyQdWV4stin+
QXoYxc/Bzi6ZR1ibDiZ167yZcmMGY2rqcinUFnTGgVH4WpjZkxkcY3rK5/1z3Wlf
jBUu7dhpPP7L+vAJKTl5oeCFxuxMCL2En1w5/5OE5cflZODhoKsHgWz5zHz8uc0R
5SWxVvhVQpPoC9CvlzonATj4EfW8UpnTqVSsEYZQ7ofipgHSTTr+xu10oBXsXnjF
el0OqOI3KtLvyX8C23k/SBGFIDpRzcCisA+2hULW/FRsJOQIEY2Gd+hGgEos8WR9
ag81f8Itqw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:46 2025 by rpki-client