Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer (raw, json)
Hash identifier: 4t+GxtWSG+ge9VA3WMU6/sQTDTi/sSxRXOKldZBPjP0=
Subject key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D1C37A6E4E13979AAC0408DF1CC68D370
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jan 2024 10:57:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47790
IP: 91.206.210.0/23
IP: 91.226.196.0/23
IP: 91.230.8.0/23
IP: 185.142.160.0/22
IP: 185.152.120.0/22
IP: 2a14:7a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:37:a6:e4:e1:39:79:aa:c0:40:8d:f1:cc:68:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 10:57:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:df:3a:17:83:60:f3:3f:42:bc:c7:61:f0:
91:98:82:19:0d:1e:35:db:50:09:88:a9:03:78:2f:
bd:77:95:2c:c2:89:59:72:f0:6d:66:13:14:16:07:
1f:e3:45:0b:f4:d3:d7:e5:1e:b8:47:64:15:3f:85:
7b:53:0f:93:5d:da:40:0e:4f:5d:5b:41:ae:14:fd:
50:2a:a0:da:25:64:37:2b:ab:8e:fe:1d:7c:4a:95:
85:9c:38:31:0b:30:dc:5c:37:7a:ac:d3:77:31:37:
3b:10:c7:8c:54:d4:21:88:5d:08:d4:b3:91:82:26:
1f:1c:d9:14:b8:b2:b4:c0:67:d6:dd:75:ce:f7:ad:
dd:1d:0d:eb:f2:53:28:7c:99:11:4e:30:8e:90:f9:
ea:d3:1a:55:cc:a8:28:50:2b:41:3d:63:68:f0:3f:
2c:0c:93:76:1b:c7:80:5f:b2:7c:71:ca:f9:16:13:
18:35:fb:f7:0d:a1:f9:49:86:a3:0e:8e:de:43:dd:
84:b4:a5:cc:38:59:4b:53:5f:5a:7f:75:ca:9c:dc:
02:8f:c5:6a:14:07:ae:01:a0:05:f1:03:37:04:34:
de:e8:8a:56:9d:54:1a:1e:16:49:48:7d:20:df:09:
16:6f:aa:d8:bb:6c:c8:82:5f:74:8d:e2:74:46:80:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.210.0/23
91.226.196.0/23
91.230.8.0/23
185.142.160.0/22
185.152.120.0/22
IPv6:
2a14:7a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47790
Signature Algorithm: sha256WithRSAEncryption
46:33:d1:d0:b0:74:9f:29:f2:f8:4c:6e:6e:3c:db:44:ae:59:
9b:11:2c:4f:c6:15:12:69:f3:f1:82:3e:2c:a0:37:35:32:c7:
06:56:bf:11:fd:a6:ac:74:68:d7:84:9b:bb:ca:a5:d0:09:fe:
69:2b:73:38:e9:24:13:d3:9f:a4:c2:7f:f7:6b:bb:c2:df:af:
12:e8:c8:4a:ca:9a:20:65:9f:8c:ed:c8:16:9a:23:7d:39:17:
ba:fb:bd:cd:e5:7d:98:e7:1b:ec:a6:4b:cb:f2:be:fe:74:af:
18:e8:59:ed:56:64:8e:cd:7b:a5:b7:d1:97:59:aa:c9:cb:55:
a6:19:a9:d1:d9:35:de:3d:d9:3c:fc:9e:8b:67:09:26:cb:39:
97:e7:ec:23:92:22:97:11:37:ac:f5:1d:ac:46:5c:56:a6:a4:
9b:b2:e7:c5:44:b3:a4:47:c0:68:77:b6:ba:ba:c5:16:40:b9:
99:99:b8:9b:58:88:f2:b4:a1:8e:46:16:ac:c8:29:54:cc:b1:
7b:80:70:c9:6d:8c:36:bf:20:da:33:e2:12:7f:a0:33:0c:f9:
c0:33:2d:f2:9f:dc:4e:32:28:34:31:6c:ef:50:12:ae:73:6b:
1a:e6:c1:7a:60:8c:06:87:e0:bb:3c:11:2f:82:bc:96:3d:33:
55:5e:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:25 2024 by rpki-client on console-fra.rpki-client.org