Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.cer (raw, json)
Hash identifier: 6ERENmJSTVTdYp2JmX6yqQAo5oRWSgCBQdkHEO9So9g=
Subject key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C167371DF212B8CBB5D80A1E15223
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.254.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:16:73:71:df:21:2b:8c:bb:5d:80:a1:e1:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:ba:e1:66:b4:13:16:00:8d:b0:01:e6:ba:
5b:ec:0b:35:95:93:b8:c6:d2:72:22:6e:34:36:2b:
65:cd:e0:81:b4:d4:d4:9f:1e:12:3a:fd:17:31:94:
79:e9:76:95:e2:07:6d:d7:6a:94:b0:76:10:e3:27:
36:a6:ac:30:5e:6d:42:c6:7a:70:44:5c:f7:d6:76:
f8:29:06:f0:67:13:b5:00:c6:6e:f5:b1:68:f0:d0:
91:9a:24:32:b9:a4:f0:2c:20:4c:01:63:40:60:7b:
d6:d9:29:2e:4f:24:50:b7:e0:79:b1:d1:d0:d1:22:
5f:05:3d:1e:36:04:7d:e8:3d:84:e0:fb:f4:78:2d:
63:af:22:78:8a:a5:7c:81:20:5b:f0:7e:42:6c:b0:
83:c0:6d:8e:78:92:5b:1b:ee:52:57:f9:3d:8c:22:
3c:25:ab:35:6d:90:bf:51:75:ee:ba:9c:8d:d0:dc:
3d:6d:23:97:ce:29:65:77:bf:21:91:54:7b:cc:5c:
19:ef:a0:de:59:df:8f:33:c6:2a:b4:71:0e:43:3a:
5e:ee:71:99:47:10:6c:22:51:3c:da:fc:af:79:41:
9a:c8:21:30:e8:36:0b:b3:34:cd:0c:5d:9c:a8:50:
2d:1c:e9:8e:30:2c:12:36:2a:49:19:a2:b8:96:b5:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f7:5e:e1:7e:55:fe:0c:8c:c0:15:d5:b2:00:66:d9:a7:3c:
c1:78:9c:b4:0c:96:30:44:04:51:0f:2b:2f:81:08:ef:c9:5b:
9d:4f:dc:61:96:8f:20:9d:97:4f:d8:b3:d6:aa:21:33:5f:6c:
f6:f2:f6:65:88:2c:23:aa:b4:20:6d:78:df:7b:24:bd:af:e4:
f9:7c:5c:0c:2c:c4:df:fe:85:30:f7:c9:fb:09:a2:56:f6:00:
0e:f7:6e:f9:34:89:8d:55:0a:33:a6:05:ee:b8:a3:ef:23:38:
fd:4d:d0:ea:75:cb:8c:dd:d7:c9:f0:db:9f:49:37:56:78:19:
6e:17:78:0f:5a:f1:bf:8a:d9:3c:a4:9c:84:53:d5:04:36:e0:
39:10:bd:bb:85:41:23:3e:a4:80:d3:9a:58:f2:9a:f1:37:d4:
41:67:75:e4:bc:7b:ae:36:80:68:7d:ee:44:a4:03:6e:f8:b5:
59:25:fc:12:ed:1c:c1:fe:fc:c3:06:aa:39:bb:57:1e:b9:78:
aa:13:64:00:74:48:4f:05:c8:85:15:b0:89:4e:27:b1:f8:72:
26:aa:12:e8:b3:ed:0f:f0:ee:9a:de:65:18:2f:7d:f6:51:ba:
94:98:f6:6f:c7:d3:7b:c4:f0:71:41:0e:e2:69:28:6b:7e:52:
8e:4a:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:25 2024 by rpki-client on console-fra.rpki-client.org