Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer (raw, json)
Hash identifier: 4gnBE+lNDDhjLBVXQh+Mv/L/w8EtNFt2+hVGbT1fgdc=
Subject key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A553DCA3DD57ECBEAC9C6DB6BF0B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59869
IP: 45.84.132.0/22
IP: 81.22.176.0/20
IP: 178.22.224.0/21
IP: 2a07:ed80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:55:3d:ca:3d:d5:7e:cb:ea:c9:c6:db:6b:f0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:39:c9:72:89:7b:bc:84:b6:93:4c:49:5e:
ad:ed:85:ed:f1:c3:ab:91:6d:70:1d:76:75:7e:59:
b5:90:5c:56:e3:d3:98:89:06:b1:43:04:f0:2b:ea:
6c:99:3b:b7:0a:1b:90:7a:4b:a6:e4:44:a2:80:f1:
4e:dc:08:e4:3e:48:ef:0c:fe:07:65:27:52:e0:e9:
05:21:dd:a7:40:a1:90:68:7a:9d:9f:bf:9d:f4:a7:
9c:6b:a6:ba:8d:25:80:a2:e2:34:0c:b4:70:c6:1f:
20:61:b5:27:74:c7:ff:21:35:d3:90:d4:2d:1f:c1:
d1:2a:35:06:b8:5b:59:07:6c:df:90:8f:c2:e0:7a:
f1:e1:20:5a:e8:74:b7:07:57:8e:5a:ea:c2:27:14:
00:45:d3:b7:b9:ed:59:9b:30:9e:f8:81:48:1c:b1:
58:0b:ca:4d:d3:fa:11:e5:14:5f:af:44:4a:5d:ab:
4d:e7:ab:78:44:32:ea:b9:cb:09:34:4b:3b:5a:42:
8b:92:82:21:31:27:c4:03:a3:70:dc:07:6e:53:15:
74:ea:e1:2b:ea:95:59:f5:4f:0e:a7:8b:6e:2d:53:
b1:b0:3a:5b:b4:6c:07:6b:a5:15:c0:3a:0d:30:b4:
fc:af:15:4f:5a:9b:e9:f5:d2:2d:a0:28:61:1c:08:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.132.0/22
81.22.176.0/20
178.22.224.0/21
IPv6:
2a07:ed80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59869
Signature Algorithm: sha256WithRSAEncryption
25:fc:98:5b:06:57:33:2d:90:dd:ef:4d:11:d6:90:9a:8f:6b:
5c:be:79:1d:ea:bf:eb:42:d4:a6:38:d7:a4:2d:c0:0f:6c:ff:
e0:a3:32:45:a6:e7:ab:22:c6:fe:c5:37:9e:76:8d:89:b6:b3:
ff:1c:49:0e:90:2e:cf:45:cd:cf:a6:a0:84:92:98:8d:2a:3f:
3b:a5:32:8a:b3:00:7e:55:61:40:bb:e5:80:c9:6b:8b:46:f9:
57:01:ac:47:61:c6:2e:8c:45:bf:64:02:39:80:a8:e7:0b:7e:
15:cf:a6:d7:91:a7:5f:57:85:88:75:dc:39:9e:49:4a:c4:50:
36:b3:20:f2:2c:4b:e0:24:6e:cb:9d:f8:90:dd:84:1f:f2:6c:
b4:01:06:c4:77:4b:fa:ae:11:37:c6:d7:01:00:d8:d1:66:18:
6b:a8:8b:c7:b9:d3:79:dd:0f:14:d1:f3:74:4b:10:92:66:94:
4c:2d:0e:28:cc:a0:1a:4e:5d:38:f1:35:2f:69:94:ea:91:17:
f8:ea:80:50:f7:de:b4:36:a4:66:1c:cd:3c:72:9e:4d:dd:3d:
08:3b:22:a1:e7:20:3e:3a:53:e3:d1:00:d7:c4:82:2e:b7:84:
0e:bf:05:22:01:71:90:0e:d3:84:20:d7:66:4a:00:e8:a0:b4:
e3:17:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:17:13 2024 by rpki-client on console-fra.rpki-client.org