Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
File: UCcYumg5OXxsV-ztbVCVcers7d8.cer (raw, json)
Hash identifier: vWzIFd2XFI3Jcm1WbBsMkwg3QmxRz/o3zzpzAsB9o70=
Subject key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72750B8ED3C31D2262AFB1500596C5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206132
IP: 185.195.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:50:b8:ed:3c:31:d2:26:2a:fb:15:00:59:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=502718ba6839397c6c57eced6d509571eaeceddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:7a:39:a6:8a:8b:c8:79:39:d9:ac:14:3c:
99:5d:be:51:67:a7:92:b4:8c:b1:a5:54:76:f3:00:
1e:ae:8a:6c:e3:0d:42:19:d3:6a:84:8b:5d:d5:ee:
64:fc:3c:91:df:a7:d6:83:d5:35:2b:e6:37:a2:5d:
96:cd:b5:f4:aa:b3:54:f1:ab:36:c3:01:13:0a:f1:
1b:1d:78:7b:38:7f:32:d4:b8:29:c1:31:09:b0:cb:
2e:48:ff:d3:7a:22:30:86:58:33:c5:5b:ee:89:00:
cc:fc:f1:8f:0d:fd:4a:c4:6c:6f:93:45:f7:d4:0b:
ea:72:8a:4b:ee:dd:69:6f:86:a2:84:6a:43:fc:44:
b5:7f:7e:54:a6:36:08:ee:73:6b:1b:a8:f3:bb:13:
2e:3b:18:e9:b2:9e:bd:52:dd:31:4a:68:27:26:db:
f9:26:f7:0c:b1:5a:ab:60:72:20:39:d1:42:6b:94:
05:dd:01:a7:0d:18:58:4a:17:a6:8b:d5:47:c7:af:
0a:96:59:8c:cb:d8:fd:0f:17:0b:34:f9:20:c7:a0:
84:4e:53:ab:45:6f:6f:c1:09:cb:e0:2f:09:ba:af:
c0:c9:bd:65:a9:b9:86:73:09:53:a7:75:1a:a9:45:
44:22:28:c6:69:0e:98:7a:36:6e:e0:46:d8:c4:e2:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206132
Signature Algorithm: sha256WithRSAEncryption
33:22:80:38:71:62:15:0e:f4:cd:35:bc:b8:2c:22:a7:dc:91:
e9:a0:9d:e5:a8:32:b3:cc:8f:b6:59:66:9d:91:1e:86:2e:0a:
a8:ff:39:0e:e5:1a:ef:f8:bb:8a:1b:5e:2f:d5:61:bb:5d:49:
fc:fe:f9:9d:c0:64:c0:60:3f:dc:43:0d:d2:d3:78:0b:13:bb:
06:a4:72:a5:06:55:f2:b4:ce:da:ca:8b:87:a6:a7:ef:4b:7f:
29:b6:54:17:bd:b9:26:8c:28:68:bb:8e:fc:4b:6f:fe:ec:c4:
ba:b7:23:8e:f1:fc:9f:7e:92:19:93:e5:7b:27:20:5c:9e:42:
fc:46:7d:94:13:4c:d3:11:ab:56:d7:ea:27:d8:4a:5a:11:9d:
a1:c6:fe:ea:fa:23:a1:7d:9d:21:f1:79:c1:dd:e8:76:e0:98:
39:c8:68:fb:e5:aa:3f:8c:07:0a:4f:ed:eb:ff:f2:20:15:99:
e4:cd:b1:3e:99:fa:51:bc:5a:84:7c:ed:a1:47:ee:ae:24:4b:
91:9a:4a:5e:e5:5f:d2:68:23:74:15:1c:80:06:6b:cf:f0:9b:
f6:f9:92:0f:cb:5a:1b:51:37:9e:d1:c6:8c:79:81:4e:1f:4b:
7e:ab:37:38:9e:b9:78:41:d8:fd:68:ed:a2:18:a1:ac:6e:6a:
2c:13:eb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:54:01 2024 by rpki-client on console-fra.rpki-client.org