Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer (raw, json)
Hash identifier: qCiuv5kmy0TEY/23x+1rar+0nGWMSed7bnhDquvlfZs=
Subject key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC8B49E2BC4A7E8AA190486E5CEB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213145
IP: 185.14.172.0/22
IP: 185.117.99.0/24
IP: 185.117.120.0/22
IP: 188.125.171.0 -- 188.125.173.255
IP: 188.125.175.0/24
IP: 2a10:26c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:b4:9e:2b:c4:a7:e8:aa:19:04:86:e5:ce:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:a4:4e:5e:87:48:e0:72:51:be:cc:c9:d6:
3e:7f:cc:ec:7d:47:0f:b7:92:90:25:00:ef:a5:89:
f2:97:01:43:63:89:e5:e2:7c:e4:dd:4e:a2:9c:10:
29:4f:ad:3e:9a:77:77:b7:85:9b:47:01:a0:5e:f6:
e1:0d:e1:28:8b:25:8d:fe:94:ff:5b:82:a7:90:10:
ca:c3:97:f8:6a:64:42:74:d4:59:e1:3e:2f:3e:0c:
ae:6d:79:b9:a4:8d:18:20:4a:6f:16:71:35:85:c2:
d8:c0:68:06:80:cf:9e:e5:0a:2d:cd:34:80:ca:35:
6f:e0:8d:fd:5f:38:83:fe:83:1c:ff:39:cf:3e:5f:
9f:0b:fd:b7:a3:7f:f2:41:f8:ac:f4:cd:7e:35:b0:
2b:7f:a2:f5:45:43:46:bd:95:c2:05:f1:2b:5b:b3:
01:04:1d:0b:14:ce:66:93:92:f6:d4:87:69:00:77:
2a:89:35:64:19:b1:79:4a:6b:d1:3f:87:ea:5c:98:
e5:21:70:44:24:30:9a:d5:60:c8:b4:e6:5f:3b:dd:
f5:8a:83:e6:b9:13:42:28:98:65:51:ed:0e:63:ab:
9d:4b:19:15:bf:77:cb:66:ee:7d:a8:10:68:72:8d:
71:9e:db:eb:3d:64:d3:ea:eb:bc:3f:6c:92:8f:33:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/22
185.117.99.0/24
185.117.120.0/22
188.125.171.0-188.125.173.255
188.125.175.0/24
IPv6:
2a10:26c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213145
Signature Algorithm: sha256WithRSAEncryption
87:4b:8e:bc:03:50:64:39:da:38:ab:fa:99:03:06:b8:b1:c6:
a8:8e:0f:c3:87:51:ab:6b:27:ad:01:95:4b:b5:ca:39:2f:bc:
c2:e0:ce:04:85:9c:7b:52:f5:7f:91:e0:14:45:bc:0d:bb:7a:
de:5e:51:38:48:a5:79:ff:38:53:62:1d:d1:c8:dd:96:08:f0:
33:41:67:c3:00:08:16:ef:fc:f7:eb:ff:1f:a5:52:aa:fc:49:
30:f8:74:30:74:4f:40:76:cb:f9:26:d2:0f:79:14:75:67:28:
6c:4e:c0:14:bd:52:e0:f1:5a:ee:ca:8e:2f:51:6b:ed:f3:8e:
09:be:2e:fe:72:78:c3:a3:1c:cf:41:67:10:18:bc:01:74:5c:
e7:e2:29:7f:f7:b7:34:e4:22:af:14:b0:63:9a:f1:be:a2:af:
2c:3b:a8:f2:4b:8f:a6:bf:5b:b9:37:b4:50:54:8e:04:2d:85:
24:98:e6:23:7e:47:ec:fe:f3:25:34:d4:f4:44:af:43:4b:67:
99:27:d0:ab:45:4c:c1:50:68:f9:ca:6d:c3:37:98:24:ee:92:
27:a7:ed:fd:a5:df:04:b2:30:c2:cf:6b:2d:6f:9b:84:15:ca:
55:99:ca:73:da:51:6a:26:df:b5:11:9e:99:dd:50:36:00:98:
12:98:17:4d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAYzC2si0nivEp+iqGQSG5c65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOGkTl6HSOByUb7MydY+f8zsfUcP
t5KQJQDvpYnylwFDY4nl4nzk3U6inBApT60+mnd3t4WbRwGgXvbhDeEoiyWN/pT/
W4KnkBDKw5f4amRCdNRZ4T4vPgyubXm5pI0YIEpvFnE1hcLYwGgGgM+e5QotzTSA
yjVv4I39XziD/oMc/znPPl+fC/23o3/yQfis9M1+NbArf6L1RUNGvZXCBfErW7MB
BB0LFM5mk5L21IdpAHcqiTVkGbF5SmvRP4fqXJjlIXBEJDCa1WDItOZfO931ioPm
uRNCKJhlUe0OY6udSxkVv3fLZu59qBBoco1xntvrPWTT6uu8P2ySjzNuRQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFJ6eaIfqdXKmQRMGyHsMwIk5emNUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2UyYWJh
ZC01OGZhLTRjZWQtODY1MC1lYzUwOGRlYzc3OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZTJhYmFk
LTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3FaQkV3Ykll
d3pBaVRsNlkxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF
BwEHAQH/BD8wPTAsBAIAATAmAwQCuQ6sAwQAuXVjAwQCuXV4MAwDBAC8fasDBAG8
fawDBAC8fa8wDQQCAAIwBwMFACoQJsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
A0CZMA0GCSqGSIb3DQEBCwUAA4IBAQCHS468A1BkOdo4q/qZAwa4scaojg/Dh1Gr
ayetAZVLtco5L7zC4M4EhZx7UvV/keAURbwNu3reXlE4SKV5/zhTYh3RyN2WCPAz
QWfDAAgW7/z36/8fpVKq/Ekw+HQwdE9Adsv5JtIPeRR1ZyhsTsAUvVLg8Vruyo4v
UWvt844Jvi7+cnjDoxzPQWcQGLwBdFzn4il/97c05CKvFLBjmvG+oq8sO6jyS4+m
v1u5N7RQVI4ELYUkmOYjfkfs/vMlNNT0RK9DS2eZJ9CrRUzBUGj5ym3DN5gk7pIn
p+39pd8EsjDCz2stb5uEFcpVmcpz2lFqJt+1EZ6Z3VA2AJgSmBdN
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:53 2024 by rpki-client on console-ams.rpki-client.org