Certificate
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
File: C8623AA6C30FA8E058243708F5672D7960E52389.cer (raw, json)
Hash identifier: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=
Subject key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E
Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e
Certificate serial: 24C8D9B285B99173F1FD0406E98FC353BF77C0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
Manifest: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
caRepository: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
Notify URL: https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before: Wed 14 May 2025 07:41:38 +0000
Certificate not after: Wed 13 May 2026 07:46:38 +0000
Subordinate resources: IP: 2a04:b905::/32
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c8:d9:b2:85:b9:91:73:f1:fd:04:06:e9:8f:c3:53:bf:77:c0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e
Validity
Not Before: May 14 07:41:38 2025 GMT
Not After : May 13 07:46:38 2026 GMT
Subject: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:74:f5:21:88:8c:11:78:29:03:54:fe:81:
d4:69:60:51:c5:ed:67:d5:31:b3:fa:dc:72:24:6e:
8d:4e:cf:f5:18:ab:d8:ee:0f:f2:93:cb:45:6c:3f:
81:9c:fb:71:6e:0b:71:34:2e:c3:f3:9c:af:6d:00:
bf:36:5b:f2:d3:6f:29:fc:e3:eb:c4:a3:72:62:33:
de:ce:94:a9:92:10:f3:27:7c:9b:c8:04:ed:f7:d9:
bb:3d:79:c7:ae:52:dc:0b:b2:99:81:20:06:51:ec:
4d:4a:42:e7:5e:c7:84:6e:19:90:04:43:f9:47:8f:
cf:f4:68:38:9f:d4:15:58:66:57:f3:cc:9d:ac:01:
93:5f:61:e4:b3:6e:a6:47:07:ac:e5:1e:af:d6:30:
c4:d6:03:12:ec:25:17:16:c3:8f:2b:d5:7b:e9:d6:
63:f0:8e:78:7a:29:bc:3b:99:0e:f8:1e:86:7d:4a:
cb:a9:48:08:80:d4:32:3e:bc:38:88:14:eb:b8:4a:
22:1f:2f:c5:6f:c3:de:d1:32:bb:9f:8b:56:61:e6:
85:68:23:10:33:03:bd:5a:47:83:ef:f9:10:c4:98:
83:63:3a:d2:72:a9:af:54:58:05:d9:f4:71:53:e1:
54:79:08:e1:64:8a:f3:71:77:5a:a8:8e:39:3c:ca:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Authority Key Identifier:
keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
Subject Information Access:
CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/32
Signature Algorithm: sha256WithRSAEncryption
48:c8:c0:1a:1f:bf:14:0c:7a:69:6f:59:f8:e8:98:15:d2:99:
08:e3:43:68:39:21:f2:24:b5:9b:0a:5c:57:3e:40:9f:51:23:
9f:bd:ab:b7:43:6e:99:14:26:b1:e5:b7:d1:d5:e1:92:8e:06:
5c:95:cc:fb:37:05:f5:9e:52:0a:f9:27:eb:77:3a:a2:32:4d:
0d:db:53:a4:41:05:b6:79:e4:3d:78:e5:81:94:f3:de:41:c5:
a4:fa:43:f1:d1:12:34:75:7f:19:2b:ad:a7:56:5a:fa:d4:c5:
22:66:eb:18:95:41:52:31:6e:af:53:cd:60:eb:da:72:2e:97:
e0:15:c0:26:ab:e4:66:c8:da:8b:35:ed:5f:af:f5:bf:1a:e5:
7e:45:cf:70:75:02:07:f1:2e:79:c9:14:16:04:8e:da:2e:fa:
40:63:b7:7d:82:b6:05:72:9d:9b:90:b6:6f:7f:b1:be:8f:61:
14:b4:65:f4:18:9d:e3:4a:bd:e0:71:c5:44:9a:ec:b8:1b:96:
89:a7:5d:7a:2f:01:5b:2d:98:4e:1c:42:fb:ec:eb:4e:90:1f:
bb:ad:48:ed:f8:96:31:f2:2c:c4:be:12:b5:ab:a9:70:94:5e:
77:be:04:81:67:4f:39:ef:f0:d0:2e:c2:96:a7:f2:0f:d2:7c:
82:62:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:17:21 2025 by rpki-client