Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer (raw, json)
Hash identifier: WkR7AEzcwq5yQoWq6YwG2bVXr6Q/V2YtxaBjHmWT4jQ=
Subject key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7AA1AA75851012D76DC5C61D65507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.182.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:aa:1a:a7:58:51:01:2d:76:dc:5c:61:d6:55:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:f3:40:95:e9:d6:43:15:53:80:5d:bc:8b:
b6:8d:68:2a:4f:1c:81:27:dc:53:e1:ed:bb:fc:b5:
07:2a:cd:d7:9b:d2:e0:d5:62:b5:6c:be:d8:2d:d9:
1d:8d:cc:ad:61:23:95:7a:2b:44:3b:17:29:b8:d6:
7e:77:ee:db:91:6c:33:05:ea:36:36:ef:fe:b4:50:
fc:40:05:8c:b3:f9:4e:42:4b:63:b5:2e:7f:60:13:
04:cf:84:c6:d0:bf:ae:aa:a5:7e:84:4d:0c:fc:05:
e9:09:8b:8f:c1:70:03:a3:e4:82:fb:92:70:f1:a9:
99:fe:3d:df:d9:f1:31:6b:7f:0e:da:5e:81:28:5c:
15:c0:4b:1d:6e:81:73:5c:15:84:f3:9d:99:76:57:
bd:80:55:11:46:87:af:5f:cd:ba:ab:5f:6c:ac:82:
b0:ff:de:a7:ca:1d:4c:4d:8b:21:0b:68:83:8d:47:
1c:ef:7c:0b:24:09:32:e1:79:79:44:e4:a1:d9:2f:
18:38:09:10:63:65:88:4c:ac:38:1a:b1:e3:b6:21:
aa:25:53:b1:61:69:e1:23:76:a7:94:3b:7b:2e:a6:
c5:ca:15:aa:19:0b:f1:58:c9:27:cc:04:45:eb:cd:
3a:fe:d7:1a:f2:ca:12:b2:85:7b:cc:98:d9:cc:a9:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2c:03:01:1c:f6:1d:cc:86:b3:14:f4:78:b4:b5:9a:bd:fc:
77:9b:df:2f:29:52:14:59:4f:a1:ce:67:0b:cf:3b:93:6b:fe:
6a:7d:2c:e2:39:8d:87:46:fc:f8:16:64:8b:65:51:fd:be:65:
a0:8c:a7:da:72:66:80:95:4a:6e:c7:80:53:5d:ce:ae:42:cd:
16:99:47:f7:8b:47:c7:d0:ba:87:d9:e0:4d:9c:1e:a5:1e:b5:
ea:d8:4b:dc:ed:2b:32:a4:50:9a:0f:ea:41:7f:1b:f6:53:04:
12:85:a1:b7:1b:42:47:c2:0b:fc:bb:7f:6a:79:5b:0e:89:9e:
cb:c3:73:39:41:7d:5b:51:49:c7:79:d6:1b:32:3b:01:68:11:
03:76:d0:55:c3:94:5d:fa:3a:24:e0:50:83:fe:54:76:a0:6f:
49:30:68:6c:2c:fe:2d:00:1c:65:c5:19:15:32:58:28:2d:49:
10:68:48:28:75:4c:df:ea:48:b2:43:f9:52:60:08:2b:d1:2b:
c1:12:73:5d:e2:26:70:c6:f0:3a:a5:0e:28:42:b8:d2:32:81:
6b:31:aa:88:3a:32:40:0a:15:02:f6:c3:1f:3b:ab:4e:cc:b9:
d9:ff:8e:51:da:9a:3d:08:d6:b5:27:ef:04:2f:aa:ff:48:f4:
04:86:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:13:46 2024 by rpki-client on console-ams.rpki-client.org