Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer (raw, json)
Hash identifier: HzJZV1oV3EO3MOH0TtcFZIruRdE/DasJCYXkRdDh3bA=
Subject key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B709BADB60EA406C1B349FD5111F6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200615
AS: 204035
AS: 208204
IP: 37.228.132.0/24
IP: 37.228.134.0/24
IP: 37.228.148.0/22
IP: 185.101.92.0/22
IP: 185.107.192.0/22
IP: 185.116.156.0/22
IP: 185.245.168.0/22
IP: 193.46.24.0/22
IP: 193.56.126.0/24
IP: 193.56.129.0/24
IP: 193.56.156.0/24
IP: 193.56.173.0/24
IP: 194.125.248.0/22
IP: 2a06:1c40::/29
IP: 2a06:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:09:ba:db:60:ea:40:6c:1b:34:9f:d5:11:1f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:0a:f4:83:35:d4:09:9f:a4:8d:aa:9a:aa:
36:0a:23:7d:ad:89:1e:8a:74:90:1e:29:b3:06:88:
d6:3f:ab:58:3f:f1:36:40:cf:af:46:60:47:43:73:
35:bd:8b:fa:1b:28:ed:31:f7:94:6f:3c:94:b1:10:
55:ca:e4:a3:06:a6:35:2e:f4:6e:c7:d9:5d:14:28:
ab:93:c4:0e:cc:95:f4:40:8e:47:b1:4e:74:38:e3:
db:43:e1:10:78:90:d3:b0:34:f2:ff:56:90:30:e1:
29:ae:ff:34:9f:83:ad:6b:76:76:f3:0f:b6:8d:9d:
81:46:a2:05:cf:61:fc:79:02:41:e4:00:3f:6f:3b:
6b:d3:36:d0:62:ce:27:3a:db:2a:b2:ac:d3:88:fa:
91:94:b0:3b:6b:4c:06:34:e2:48:22:cb:a3:94:54:
f5:d3:0a:ee:d1:39:8f:00:b7:24:fb:92:2e:35:10:
e2:98:f3:8e:eb:ee:52:a7:2f:6d:b2:5a:d6:c6:af:
f1:d4:c7:d8:bb:b0:68:0d:f7:3e:8a:cb:01:c2:1a:
62:48:2e:e2:09:86:c9:b8:d3:05:ec:2c:bd:98:db:
1b:3a:4a:0f:f3:3d:cd:dc:c9:e7:d8:5c:5b:0e:41:
5b:ae:a8:7c:01:b7:32:28:17:eb:56:52:dd:86:28:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200615
204035
208204
Signature Algorithm: sha256WithRSAEncryption
7c:a6:c8:ba:a1:36:11:d8:0f:64:32:25:b0:59:55:bf:eb:67:
2d:31:5d:1d:59:a6:79:91:6b:6e:49:ed:85:e1:6d:84:86:55:
de:50:01:ee:03:1b:66:2e:7f:0c:e6:c9:ee:26:48:51:1c:fd:
b1:ea:5c:01:87:d5:6b:e5:a0:72:b4:68:5a:5b:50:c0:d5:26:
2d:7a:30:6c:35:e3:7f:76:3c:7c:91:61:24:b0:0f:04:b2:7d:
73:14:c5:16:40:82:ba:96:64:70:f3:d8:c7:9e:53:6d:74:b3:
16:33:72:04:48:3b:b8:71:5e:73:92:9b:3c:9e:c9:26:4a:1e:
f6:ff:54:94:37:30:9e:75:94:44:88:83:91:e3:66:59:d2:6e:
2f:f0:3d:12:02:39:93:ea:f8:53:18:de:3d:28:9c:e0:12:dd:
78:bf:7f:0d:40:c7:43:8b:54:1d:7b:b6:d5:a8:ff:07:58:e4:
dd:64:38:ef:bf:28:2f:6a:6e:80:90:20:21:9e:70:a4:78:6d:
13:75:24:58:ab:c5:62:a4:2c:e9:8d:12:d1:90:9a:9e:b3:e9:
8e:ec:86:bb:db:85:8f:1b:81:6a:9d:b3:95:96:b3:b8:34:3c:
1c:d8:e2:50:24:bf:b2:23:f9:4b:84:85:b7:55:d5:ec:78:ee:
6f:d9:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:15 2024 by rpki-client on console-fra.rpki-client.org