Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer (raw, json)
Hash identifier: L6ovWhHi0saPSJ34Yu7k20Z9i6Bg5ZtV5zlgxOn60M4=
Subject key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488DAEB3FA39203C45D27C867D4687
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203120
IP: 185.144.180.0/22
IP: 2a07:4180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8d:ae:b3:fa:39:20:3c:45:d2:7c:86:7d:46:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ed76829ba6314a035fda799fc0370336657083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:04:72:d5:09:43:0b:78:32:c1:22:9f:1f:
a7:7d:5e:e5:31:13:ba:92:59:fc:29:6c:7f:36:57:
93:bf:2b:d7:af:77:2d:8c:2d:e9:fa:e2:3c:a8:5b:
75:53:4c:03:3a:8c:30:12:f3:be:71:63:f6:36:36:
9e:40:2e:44:2d:2f:9c:f2:98:b9:52:0d:d6:0b:0b:
0e:2c:47:0d:93:51:2e:5f:1a:30:81:1b:45:f7:08:
99:66:da:09:ad:35:2c:67:57:43:e8:32:2a:a8:84:
21:43:dc:f7:3b:8f:4e:69:59:aa:92:23:46:b8:c9:
ac:e1:de:d8:f9:1d:84:c4:38:de:f3:76:f4:08:c9:
2c:f7:b4:b2:74:90:18:8d:26:48:12:2f:ab:60:b1:
83:c2:5c:bd:e3:c6:95:ec:c0:e9:5a:75:99:94:c6:
84:09:3c:3c:3f:b8:5e:ef:fe:8f:b1:12:03:0a:45:
47:a3:a2:89:74:2a:38:4d:d5:c2:12:7c:1f:34:19:
0b:f7:c9:3a:ae:88:d6:64:3c:93:1d:28:6f:92:57:
c7:26:4b:bb:9f:02:56:f6:3b:6d:e5:07:83:0e:a6:
74:f7:ed:27:e8:9c:50:e1:64:2f:57:1c:a5:c1:bd:
d2:97:61:25:2a:86:cc:9f:d0:3d:a2:6f:67:51:cd:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.180.0/22
IPv6:
2a07:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203120
Signature Algorithm: sha256WithRSAEncryption
5c:22:cd:4e:58:10:7e:96:29:57:ba:b6:fc:86:1e:11:08:ef:
b4:8b:49:82:39:b7:89:35:1c:49:31:6c:ab:73:94:1a:34:8c:
cb:48:c2:ae:ce:51:96:5f:f3:78:ab:a7:80:e0:f9:82:1a:25:
3e:3a:51:ee:c0:02:6e:0d:27:39:9f:0c:71:8b:49:8e:15:7c:
d6:d9:f3:1f:c6:a5:8e:81:c2:bc:46:21:da:4a:0e:2e:9f:26:
e9:37:8c:7f:69:bc:af:0f:78:65:95:8b:88:8e:bf:61:a5:94:
f0:d8:19:18:e3:06:a4:82:f6:86:25:64:91:b4:4c:bd:8a:63:
63:a0:6f:5f:78:de:3e:51:07:fb:af:fc:bb:dd:ba:bb:06:68:
ce:bd:61:ca:7c:83:8b:2b:4d:08:a2:12:34:a2:c6:64:fa:ec:
1a:5c:ad:47:b6:0e:b5:b8:d2:6e:fd:3e:37:4d:6d:b5:94:2f:
3f:9e:df:30:96:cb:64:9e:39:82:a9:58:a3:13:55:fa:90:81:
35:59:7f:09:75:af:c4:16:05:62:8e:7b:97:a9:f8:b4:e4:9c:
bd:e7:75:b5:24:ff:74:5d:44:c9:ca:e3:f5:a4:fc:95:f8:f1:
cb:0f:39:60:18:da:17:42:35:01:01:ae:87:ed:61:02:b1:5a:
9a:6b:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:30:47 2024 by rpki-client on console-fra.rpki-client.org