Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.cer (raw, json)
Hash identifier: d4Iu11Dk3G5UjLrAbWG86k/3ysnmHWV4SSXk7frDZAo=
Subject key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABD602BB1FB3687FE96167337FAD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8859
AS: 64427
IP: 185.181.188.0/22
IP: 193.17.21.0/24
IP: 194.45.27.0/24
IP: 212.114.64.0/19
IP: 213.241.128.0/18
IP: 2001:a20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bd:60:2b:b1:fb:36:87:fe:96:16:73:37:fa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:62:02:6a:eb:2b:a3:e6:46:f3:c9:dc:c8:
04:39:9a:ef:6e:61:24:e7:8d:ad:ae:8b:a6:54:bd:
9b:94:ff:74:f2:ce:f6:e9:fa:fa:40:a0:ff:56:eb:
6e:af:8a:f8:10:fe:7b:b8:bd:90:d7:56:2e:5f:8b:
54:14:b4:9c:51:f9:72:a2:eb:a5:0f:17:ef:4c:da:
59:7e:74:e6:84:df:de:ab:58:b2:b1:85:85:9f:a7:
d7:77:62:68:df:06:04:b4:ca:48:2d:65:fa:ba:91:
1d:59:d3:ed:eb:62:0d:e9:17:55:2e:3f:d8:8b:35:
d3:9b:bb:a3:97:60:d8:29:06:46:a0:27:a7:c1:65:
8f:07:9a:6a:8e:a8:be:d4:6c:e9:6f:f5:64:91:18:
fb:54:d7:ed:8a:8b:f1:2a:ba:81:ba:c0:ef:1b:e1:
ae:89:8a:3f:f8:ee:3f:71:91:c1:4c:0f:21:3c:ea:
69:68:f5:92:32:32:d3:79:96:91:85:cc:92:d9:c2:
d9:53:ca:70:86:a0:b9:53:35:94:54:ee:f0:53:24:
47:41:a8:95:f1:c7:6a:ec:4e:28:aa:1d:f8:31:41:
b8:ac:7e:38:bf:00:0c:ba:de:14:9a:8f:59:fb:61:
b0:2b:e8:75:50:d8:c9:60:a9:4f:eb:41:01:b6:4a:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.188.0/22
193.17.21.0/24
194.45.27.0/24
212.114.64.0/19
213.241.128.0/18
IPv6:
2001:a20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8859
64427
Signature Algorithm: sha256WithRSAEncryption
a0:f5:ee:58:9d:ba:b5:89:fb:45:6b:5a:cf:88:e3:4c:b6:83:
10:a5:58:63:48:c1:4c:fd:79:89:96:3c:ed:40:23:7d:2d:61:
5e:be:3d:9e:04:fa:8e:fc:c1:39:79:bc:78:3c:14:9b:a0:33:
ef:fe:d0:27:2b:02:21:bf:c3:d2:b1:18:0c:6e:bb:23:e4:2f:
23:47:2f:42:58:ef:2a:f5:fd:86:9e:67:27:9c:dd:a7:1e:19:
ce:06:fd:e3:ba:c0:bb:74:f1:13:57:43:16:68:e2:b6:d4:2b:
fa:9c:29:3f:28:3c:a6:25:2f:a1:1b:0d:29:35:ae:78:46:21:
d7:81:e8:a9:24:f7:96:6f:b0:e1:97:f4:2d:6e:7e:4c:7e:31:
fe:70:80:6d:6c:0f:64:1e:c7:de:03:db:cc:f2:47:0d:1a:58:
d9:0b:8b:c0:19:90:e4:06:39:6c:1e:ae:71:5a:70:49:8d:45:
1b:76:6c:b6:c5:f0:10:83:21:b4:a0:21:48:d7:71:4a:29:85:
6b:15:06:0a:24:98:83:42:44:08:53:74:4e:c6:37:49:92:d2:
d4:d5:a2:22:0e:b6:1f:66:25:59:4a:ad:04:dc:5c:ed:57:cf:
74:e3:25:e0:72:cb:2f:3c:0e:ef:2f:f8:99:45:48:1b:ed:6b:
03:64:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:56 2024 by rpki-client on console-fra.rpki-client.org