Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
File: nzbQijzYpC9Goslt_XLtjO4nlHc.cer (raw, json)
Hash identifier: CsWfEfh5cuL9nC3Z/jrOzJrob8GQvyRrXLxt5zsv1x4=
Subject key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DABFE8B802FBCFD9E0E4ED9EB63D21778
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 09:00:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50467
AS: 50994
AS: 60317
IP: 31.134.48.0/20
IP: 46.151.16.0/21
IP: 87.239.168.0/21
IP: 91.221.88.0/23
IP: 109.95.112.0/21
IP: 109.95.144.0/21
IP: 178.218.224.0/20
IP: 185.235.76.0/24
IP: 193.106.208.0/23
IP: 193.200.133.0/24
IP: 2a0c:db00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:fe:8b:80:2f:bc:fd:9e:0e:4e:d9:eb:63:d2:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 09:00:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:13:ee:44:b6:64:ec:aa:b2:13:4d:5e:1f:
23:65:7d:34:70:80:32:2d:f4:ea:60:79:3f:ed:95:
11:de:cc:e6:6d:74:d5:c4:07:79:23:62:59:5b:6c:
9b:03:40:6f:be:51:2a:f3:62:24:ed:0a:e4:1d:0d:
5e:f1:f7:41:10:84:8e:74:65:4e:8f:64:12:17:bf:
84:77:0b:24:a6:76:bb:0a:0f:c4:47:f1:48:1a:2a:
15:d4:57:6c:b3:da:13:a1:b2:d8:cf:b8:76:82:42:
f6:e9:d4:2d:88:27:ae:8d:15:d1:7e:2d:7e:10:d6:
64:20:54:75:63:2b:ad:c0:9d:60:97:0a:b2:a7:bc:
93:4c:57:84:52:ac:77:a2:ee:21:1c:94:24:d6:38:
a0:df:7e:49:e2:61:9e:a8:0d:68:99:59:a8:87:36:
34:6e:37:1b:8a:e4:e1:07:36:63:01:66:dc:75:27:
ab:ae:e5:d9:93:3f:7a:11:fa:7a:f1:3b:ad:e6:e9:
e2:35:ac:ea:17:35:86:96:ca:cf:ee:3f:56:83:e3:
e3:9f:d6:d2:de:94:0c:1b:f8:e6:a1:58:c0:20:25:
c3:2f:a6:58:2c:17:85:00:fd:f2:66:dc:38:1e:9f:
4e:7c:c4:b8:58:09:c8:dd:bc:ec:ce:72:78:36:78:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.48.0/20
46.151.16.0/21
87.239.168.0/21
91.221.88.0/23
109.95.112.0/21
109.95.144.0/21
178.218.224.0/20
185.235.76.0/24
193.106.208.0/23
193.200.133.0/24
IPv6:
2a0c:db00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50467
50994
60317
Signature Algorithm: sha256WithRSAEncryption
3b:b7:7c:d7:bf:eb:8a:ed:cb:79:ab:30:e5:01:31:32:f7:03:
65:b8:f5:3d:31:ba:90:f3:e5:22:9e:a4:71:fe:d1:73:a9:7a:
00:4a:20:5d:5d:1f:34:bb:b5:ab:f3:d3:b9:5d:9c:3a:15:26:
16:b3:9d:87:75:82:4a:98:9b:c8:f7:71:05:e0:86:61:df:0b:
46:e8:77:d7:d2:19:0e:4a:00:8e:02:65:d3:29:3f:92:0d:52:
b6:4b:90:e0:74:1e:5f:75:e5:2b:5c:33:c3:44:2f:e4:02:f2:
07:83:93:95:13:58:d4:20:2c:b8:a8:1f:d0:37:e3:84:d8:18:
73:7c:f6:93:75:b6:7f:9e:72:8c:75:5d:8d:9d:94:df:70:7b:
dc:b6:4c:de:e1:bf:0c:7d:93:ee:5b:df:69:18:7f:e7:f1:30:
84:2d:8c:c0:ed:a9:ff:f6:4b:86:f3:bc:db:c4:44:e8:89:fc:
55:b6:85:9f:b9:fd:8d:80:f2:cc:8c:b3:1d:e2:6b:8d:0d:d5:
a3:21:1e:f8:b2:62:d5:a8:d9:2d:ec:26:e5:4b:16:76:89:17:
54:86:57:e9:96:20:06:f1:69:89:ac:9c:e2:c3:95:33:4c:3e:
17:83:90:20:c8:3b:1b:6f:ec:ed:e9:1f:db:31:b3:0a:cd:8d:
64:56:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:02:19 2024 by rpki-client on console-ams.rpki-client.org