Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer (raw, json)
Hash identifier: Ngg0ZI5Hm3jEFR+0mK8ZXIifGwBfExtDHI7gAo0PqpA=
Subject key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B190041307F3E7788B7DCAFB1D6A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.76.44.0/22
IP: 2a03:4ea0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:19:00:41:30:7f:3e:77:88:b7:dc:af:b1:d6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:2b:f3:0c:a2:ce:33:4b:01:a8:47:34:0f:
d0:07:ce:23:57:86:83:2c:e6:be:42:04:3a:b6:40:
c1:12:c4:5a:42:8c:5f:20:0f:68:b5:3f:aa:8c:a1:
44:7e:f3:0a:11:d3:da:88:97:d5:04:09:2a:ef:32:
b1:cc:88:47:f9:70:43:46:db:14:0e:63:35:17:50:
9d:6c:6c:a1:17:d9:41:84:fc:10:ee:3e:20:a1:8a:
16:72:63:0f:f8:a4:9d:06:b8:d5:1c:99:1d:2a:1f:
41:f0:a5:43:c2:51:34:7d:97:64:cd:e5:4e:12:88:
90:07:c3:77:cc:d6:15:0d:da:a6:d0:f9:6d:30:9c:
69:4d:02:36:36:ca:e9:57:be:9a:78:d4:b2:47:ca:
99:42:f9:60:22:46:27:62:a3:3a:26:5b:b6:ca:ca:
ca:b8:9f:17:e6:9a:8b:b9:9e:9a:0c:8f:e1:c5:27:
b7:d0:12:57:12:94:64:d4:d4:fa:8c:b8:f3:5e:a4:
af:db:e8:69:ec:c3:1d:27:e5:5f:d8:82:0e:57:52:
62:79:28:35:74:04:d5:a2:f1:89:b3:8a:25:fb:b7:
b5:39:67:de:35:0f:a8:20:a5:17:de:08:e8:5d:07:
77:1d:fc:ac:16:79:7d:b6:38:c8:5c:80:cb:ed:a4:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.44.0/22
IPv6:
2a03:4ea0::/32
Signature Algorithm: sha256WithRSAEncryption
62:1c:12:af:c8:19:f6:c2:df:a6:5f:3f:94:ba:85:af:b2:84:
e1:30:11:5c:9b:2b:f3:ad:7f:dd:f4:5c:10:f0:6c:42:79:2d:
80:f9:58:78:8b:0a:38:95:27:73:15:a4:50:ab:4b:ec:6e:36:
1d:2e:9e:f0:57:b0:21:5a:96:a1:59:79:75:71:d2:e4:40:95:
29:f5:f4:cb:9d:ad:25:68:ba:ce:ba:4a:a6:d2:4b:a5:93:f6:
7c:10:8e:62:23:b0:ef:e1:57:d8:4f:e9:77:00:0a:7e:ba:a4:
3b:d5:fd:2c:66:82:87:ef:23:7a:fb:ba:85:bc:1e:bf:5e:4c:
c0:ed:2e:a2:ee:86:23:22:f6:79:57:a6:da:11:5a:0d:a8:99:
dd:60:0a:de:e3:d6:96:55:96:88:67:72:6f:84:77:34:97:67:
43:85:9a:59:7a:b1:47:c4:22:62:ab:a4:cd:cc:51:07:4f:f6:
01:ec:a4:f0:80:c1:2c:59:03:f0:d2:38:ca:fb:8d:a2:f0:8b:
59:e9:59:46:31:25:0e:b3:01:a9:0e:1c:5f:36:ed:44:9c:dd:
0e:35:03:b6:6f:19:ce:92:c0:86:b7:ce:0d:f4:18:5a:60:37:
2e:cb:b2:c9:66:93:de:be:29:75:71:3d:c1:ab:ce:cb:07:39:
86:d4:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:01:19 2024 by rpki-client on console-fra.rpki-client.org