Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.cer (raw, json)
Hash identifier: FGHXS8xK1DZYDw5v/dWOh6WguRW8XeiwOXZuz9lOuPM=
Subject key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D0735A077B80080E561A6C5CE28F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.124.0.0 -- 62.126.255.255
IP: 62.188.0.0/16
IP: 213.116.0.0/15
IP: 2a02:2a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:35:a0:77:b8:00:80:e5:61:a6:c5:ce:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:cf:a4:6a:19:9d:77:21:20:82:6a:bf:25:
a4:88:fb:0c:32:91:15:96:1b:74:9a:93:63:bc:c3:
ac:c4:39:ed:d2:8b:3e:3b:6d:63:76:87:26:f5:15:
e1:cf:a1:99:05:89:9c:e1:d9:4d:75:02:f5:60:6b:
f4:d3:6c:86:29:bd:9f:2f:87:a9:6a:b1:a3:11:65:
b6:c1:0f:03:12:ed:7b:ef:9d:e9:e9:07:b2:a8:9f:
3c:b4:17:83:47:a8:d2:c8:a2:e7:b4:d5:ff:c1:3a:
e6:d6:f1:80:8f:fb:9d:56:67:04:7a:f5:98:c9:06:
46:3f:8d:8c:bf:30:ff:1e:00:9f:36:b6:7d:c1:ac:
cb:40:61:ef:b4:fe:bd:d4:df:b3:ca:63:d8:f8:ea:
a9:c5:7d:f6:e1:3f:c2:fd:f4:60:33:a4:02:19:30:
ce:fe:df:f8:ed:ba:0b:a0:3b:ce:af:bb:ad:04:fc:
4b:20:a9:d4:71:ea:e2:1a:6f:76:c6:2b:93:e1:90:
d4:6d:76:23:23:81:1d:01:34:b0:5b:04:ad:8c:e0:
f6:30:98:d6:4f:a2:59:4f:89:fd:94:a7:83:32:f0:
55:f4:e6:c1:41:b7:c6:7a:e6:90:84:59:65:3b:d1:
a6:ea:a1:23:db:9c:73:e3:96:26:c6:d0:e7:fd:72:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.124.0.0-62.126.255.255
62.188.0.0/16
213.116.0.0/15
IPv6:
2a02:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
68:5d:68:b4:e4:50:ab:c9:a8:a9:be:6f:16:78:b8:97:30:e2:
82:70:10:f6:8c:76:c1:52:25:8f:f0:18:cf:7c:f3:f0:ce:fe:
39:75:f6:ec:3e:d8:0e:0e:7a:3b:dc:40:46:40:57:d1:a3:a5:
a1:db:b5:46:9a:b3:4c:0b:d9:90:62:9c:da:30:7d:e1:f2:e7:
b9:a8:40:42:a7:a0:dc:84:32:a4:73:8c:f1:e0:fd:3c:7c:ec:
e0:b4:c9:f6:e7:87:17:25:09:b7:10:d9:e7:ab:fb:c3:6e:3a:
16:6f:a0:b4:41:8e:16:7d:3e:43:b8:09:cb:11:71:df:dc:97:
d2:8f:7d:54:f7:21:b0:06:5e:73:6b:b1:1e:b4:13:de:75:1d:
86:b2:f6:b4:de:ae:13:72:68:25:d7:65:64:cf:86:2e:2f:ae:
ae:5c:19:9b:fc:0c:03:dd:89:cf:7c:81:c9:be:4b:66:bc:06:
e9:27:7b:20:fb:e4:38:19:2c:77:66:0c:20:5d:2c:df:48:5c:
da:59:fc:72:d9:38:8d:97:dc:b5:08:6e:15:c6:78:eb:c3:9c:
c6:02:14:01:7e:e1:ba:4c:1c:d6:45:86:7e:fd:04:d7:7d:11:
b6:1b:e3:0d:4b:5e:f4:6f:13:02:29:92:79:9a:c3:25:76:46:
7a:bf:3e:8a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzCbQc1oHe4AIDlYabFzijxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjIxZWFhYTdiZDBlZTY3Y2E2MzAyZTNkN2FhYWU2NGQ3Mjk0MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNnPpGoZnXchIIJqvyWkiPsMMpEV
lht0mpNjvMOsxDnt0os+O21jdocm9RXhz6GZBYmc4dlNdQL1YGv002yGKb2fL4ep
arGjEWW2wQ8DEu17753p6QeyqJ88tBeDR6jSyKLntNX/wTrm1vGAj/udVmcEevWY
yQZGP42MvzD/HgCfNrZ9wazLQGHvtP691N+zymPY+OqpxX324T/C/fRgM6QCGTDO
/t/47boLoDvOr7utBPxLIKnUceriGm92xiuT4ZDUbXYjI4EdATSwWwStjOD2MJjW
T6JZT4n9lKeDMvBV9ObBQbfGeuaQhFllO9Gm6qEj25xz45YmxtDn/XLeJwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFJ8h6qp70O5nymMC49eqrmTXKUAtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4Lzc2ZjQ2
Mi1hZDgxLTRmMDItODk4Yi1hOTZmNjFjMGMxZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNzZmNDYy
LWFkODEtNGYwMi04OThiLWE5NmY2MWMwYzFkYS8xL255SHFxbnZRN21mS1l3TGox
NnF1Wk5jcFFDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF
BwEHAQH/BC8wLTAcBAIAATAWMAoDAwI+fAMDAD5+AwMAPrwDAwHVdDANBAIAAjAH
AwUAKgIqgDANBgkqhkiG9w0BAQsFAAOCAQEAaF1otORQq8moqb5vFni4lzDignAQ
9ox2wVIlj/AYz3zz8M7+OXX27D7YDg56O9xARkBX0aOlodu1RpqzTAvZkGKc2jB9
4fLnuahAQqeg3IQypHOM8eD9PHzs4LTJ9ueHFyUJtxDZ56v7w246Fm+gtEGOFn0+
Q7gJyxFx39yX0o99VPchsAZec2uxHrQT3nUdhrL2tN6uE3JoJddlZM+GLi+urlwZ
m/wMA92Jz3yByb5LZrwG6Sd7IPvkOBksd2YMIF0s30hc2ln8ctk4jZfctQhuFcZ4
68OcxgIUAX7hukwc1kWGfv0E130RthvjDUte9G8TAimSeZrDJXZGer8+ig==
-----END CERTIFICATE-----
Generated at Fri May 3 07:29:23 2024 by rpki-client on console-ams.rpki-client.org