Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.cer (raw, json)
Hash identifier: PGHcwyCuxcpglLFpniS5+lnFgoemytwF/bfILqkzOvw=
Subject key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E394DCEE0BEE30941B0626104B564
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208859
IP: 45.81.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:39:4d:ce:e0:be:e3:09:41:b0:62:61:04:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:52:0d:62:d5:a6:e1:7a:d7:9a:23:7a:5e:
55:8f:b1:79:3d:d5:88:7f:54:d7:fe:e7:a0:14:3b:
0f:76:5c:6a:dc:56:a2:8b:04:3b:04:c0:18:f2:5c:
ae:97:29:59:9b:21:2a:f1:f5:92:12:9e:b8:05:a9:
74:3c:58:6c:62:04:9d:99:ba:f6:5f:45:9b:e7:f9:
59:ce:a4:f0:0f:f1:84:76:6c:01:42:b7:c4:9a:05:
39:e2:cb:5d:d0:d8:ad:a1:a8:a3:a4:9b:b6:62:7c:
c7:84:21:d8:3f:fe:fd:9f:11:0d:08:66:87:89:31:
a8:fd:fd:89:59:ac:b9:6f:c9:bd:61:50:19:72:b8:
70:01:dc:78:af:62:ad:5a:31:a8:09:b3:81:df:6a:
2c:64:15:60:80:0b:2e:cb:5f:80:d3:ec:34:47:3b:
b3:8c:09:7d:04:2f:3d:fd:6b:4c:e6:a7:94:5f:6c:
a1:de:bd:0e:1e:f5:e1:4f:9e:a1:08:77:62:c6:67:
d7:bf:86:3d:74:b1:64:d7:5c:95:fd:a4:02:02:e8:
30:6a:33:75:ca:29:e6:f8:18:7e:41:68:f2:25:d4:
91:1e:da:2a:73:3f:71:1e:b8:16:9a:c0:16:24:30:
3e:cf:91:90:d7:5e:c6:63:cc:59:b0:4c:db:a3:cc:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.144.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208859
Signature Algorithm: sha256WithRSAEncryption
46:e5:31:ec:48:06:be:93:72:47:60:5e:67:14:db:08:66:50:
b0:a2:85:3d:6c:2c:e2:9c:d4:0c:9a:1c:bf:f6:cb:b1:82:a8:
7b:fa:bf:6d:52:b9:18:0e:16:83:0e:22:3e:9d:15:bf:03:60:
9b:4c:5a:e5:d2:7b:12:cf:a8:ce:5a:cb:65:c9:8d:ef:09:66:
8c:6f:9a:74:ba:18:c5:b7:3e:18:a2:df:21:82:13:5d:3b:8b:
fc:5a:3b:15:65:af:e4:18:69:e3:cc:e9:61:94:07:fa:1b:2c:
9c:aa:71:36:35:33:61:a0:71:b8:c4:2c:69:b0:ed:ef:3a:b1:
55:b4:44:d0:7d:fa:16:ff:75:bc:07:07:57:a5:13:30:bf:59:
b6:8d:e1:02:5d:3b:4f:ad:a6:cd:3e:de:b6:97:ba:84:2d:e5:
bc:96:11:6c:85:ed:fe:c8:e1:ed:bc:d1:c1:3d:82:50:eb:cb:
69:38:84:44:bb:f9:d2:00:20:34:ab:72:ce:7b:8b:c1:ff:f5:
47:5b:e3:76:fc:e1:bc:4f:73:30:95:c9:17:f6:73:59:c1:13:
41:90:84:31:e8:0a:b1:4c:90:7e:90:df:2e:e6:01:d2:b9:1c:
fa:62:6f:d5:0a:b3:2b:1f:8a:e8:24:36:72:9b:9c:15:84:3c:
a5:24:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:19 2024 by rpki-client on console-fra.rpki-client.org