Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer (raw, json)
Hash identifier: JrHfN1KAxLgmNdPexDu5YT3sHkHV99MAXQlfMhY40I8=
Subject key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBE5CFBF44EE7F43D0B2B63AB84FD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199356
IP: 185.18.68.0/22
IP: 2a03:d140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e5:cf:bf:44:ee:7f:43:d0:b2:b6:3a:b8:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:bb:41:73:12:23:08:28:77:73:98:ac:1d:
c9:98:41:da:e8:7c:76:07:db:6d:a3:69:e1:47:a1:
e0:d6:56:5c:ed:17:0c:06:9f:56:3b:38:77:24:6a:
d8:c0:e6:ac:da:39:09:d7:d9:2d:e5:17:9d:18:6e:
db:89:10:a3:b1:a8:7d:cf:07:06:14:04:b2:95:59:
7b:cb:4d:66:97:57:72:7b:43:58:71:2a:8d:2b:f6:
43:7e:fd:53:e3:51:9d:6f:2f:42:c3:26:dc:7f:09:
2a:72:42:73:44:df:80:ce:96:67:2e:1a:26:77:0c:
0d:e4:c5:5c:6b:91:62:f7:e5:43:8f:d8:a5:43:cc:
a2:00:d5:47:db:da:37:d7:f5:ca:57:1b:4b:c7:05:
f4:62:17:c7:af:6a:ed:80:ab:d2:f8:9f:bd:d4:ad:
e4:27:d5:d5:ad:17:50:6c:02:ed:e9:e4:c7:95:db:
67:2a:be:6b:8b:04:f5:6f:d1:c0:be:f1:e7:3c:f8:
38:c9:75:55:89:12:50:ec:f2:44:25:b1:42:41:57:
24:07:04:81:c0:25:3d:b3:31:9c:99:c0:79:b2:b8:
71:97:73:9d:21:45:0e:7a:bc:f8:5a:b8:06:6e:55:
25:4f:74:db:c7:41:b1:04:18:2f:da:cc:0d:61:0c:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.68.0/22
IPv6:
2a03:d140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199356
Signature Algorithm: sha256WithRSAEncryption
3a:f7:df:44:ea:92:10:db:72:54:b2:91:7a:9c:02:fe:f8:05:
30:b5:ba:7e:cb:69:c9:85:00:1a:1b:4c:6d:4b:81:13:15:93:
7c:04:f7:92:c9:5e:6a:33:5b:38:69:1e:88:d5:f7:cb:ad:46:
04:92:cd:78:33:f9:df:b3:53:5a:e3:ed:6f:ac:51:5f:86:30:
69:95:1f:15:cd:02:0c:d3:db:77:8a:1f:24:91:44:79:f6:ab:
75:e4:ba:ef:ac:eb:98:44:cb:3d:23:15:5f:81:34:7e:7a:40:
3e:cf:37:43:b5:36:fd:e3:fe:26:90:19:ad:a8:d0:76:d0:80:
7d:5c:4a:3d:1e:8f:33:2b:03:00:c0:91:28:9d:73:c9:01:1e:
03:ac:f2:76:37:0a:bd:ad:81:0e:65:21:65:d8:db:0e:5e:76:
a1:bc:81:41:08:ae:96:ae:6e:05:16:f7:0a:3f:6c:96:68:dd:
f0:bc:9e:1f:e5:b0:70:15:30:c0:90:38:d4:94:f0:ef:85:5e:
aa:b4:9e:30:2b:e5:5a:a9:ce:5e:04:86:d5:48:5d:62:d9:6f:
66:8c:4e:ab:82:ce:d1:f9:01:9a:9d:26:d1:93:73:7a:82:89:
2c:bf:ec:41:f9:2e:c6:95:9a:46:11:13:6a:b3:7c:10:ec:16:
58:72:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:16 2024 by rpki-client on console-fra.rpki-client.org