Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer (raw, json)
Hash identifier: Ihe1QxzZLfn3PJ4DBYGJ1r76z9dEKmirAH8lJtpYqDo=
Subject key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5013253C1774C8FCA02F483A4304020
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213363
IP: 77.83.120.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:32:53:c1:77:4c:8f:ca:02:f4:83:a4:30:40:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:f0:dc:02:5f:bd:cd:ee:38:6b:8c:ad:45:
57:7c:8f:ca:15:b2:6a:1f:d1:93:47:7a:2a:83:a4:
36:35:23:41:54:5e:33:e6:4c:2c:2b:cd:fc:da:36:
47:f7:05:42:6a:cd:ff:57:61:be:25:2e:21:e0:13:
17:63:bb:26:68:9b:b6:07:42:da:16:fc:22:61:20:
90:87:82:07:ce:d6:10:f0:4d:3e:09:07:1f:a0:74:
c3:9b:0b:74:ab:ec:b6:65:7f:4e:07:9d:b3:a1:d6:
04:d5:22:00:ea:fe:4f:d1:e7:68:87:c0:cb:c8:3a:
91:77:6b:02:29:9e:be:61:1a:f1:8f:df:8b:a1:46:
d4:46:cf:ee:5b:04:4d:fd:93:a6:86:97:b0:71:08:
58:95:13:06:ed:ae:9c:30:09:0c:53:41:1e:83:8c:
09:95:f7:14:41:a9:4b:dc:01:6e:52:c0:9f:3f:c1:
be:9e:f1:0f:5e:dd:d0:df:82:ad:15:7c:05:01:c4:
15:bc:cb:5d:9e:f1:91:17:6d:c0:16:87:cd:34:6c:
3f:e1:9c:19:66:8a:3f:2a:4b:5b:bd:c5:cf:59:8f:
e1:45:32:67:7a:9f:5d:04:f3:8e:38:25:64:4f:b2:
75:5f:db:94:b5:76:d1:86:c9:27:40:89:53:85:76:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.120.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213363
Signature Algorithm: sha256WithRSAEncryption
8e:b6:f0:b4:49:59:13:a5:10:85:2c:5f:12:98:3c:73:d5:f2:
cb:aa:7b:27:62:c4:76:f0:e7:88:10:9b:f8:d3:0f:57:bf:8f:
72:b5:f7:18:46:42:b2:57:8a:12:c0:33:6f:16:c7:90:20:1f:
16:04:9b:dc:52:04:d3:08:9b:db:ad:2b:52:8c:1e:04:21:9f:
4a:12:cf:8a:9f:a1:59:53:20:97:47:e7:13:c3:14:59:db:30:
a0:fd:c5:69:c3:6c:98:18:3c:8e:ba:e5:c5:5f:9e:27:68:cb:
fa:cf:9d:6d:b9:80:8d:47:dd:22:0e:00:9f:5d:f8:04:bf:34:
fb:0c:4a:00:70:2e:3f:4c:fc:95:7e:78:53:12:51:8b:cc:ca:
ab:05:65:1c:db:a7:43:54:8e:c3:95:76:60:e8:74:0c:4c:d8:
04:03:b7:9c:ea:97:c6:eb:32:e3:1d:0f:29:45:6c:79:0d:a7:
3b:d3:6a:14:7b:39:d8:33:ac:c1:c2:9c:85:22:b9:b5:e8:02:
2c:43:08:eb:b3:d2:93:26:87:31:d9:2a:60:ea:93:dd:b0:43:
83:be:f8:07:9b:63:65:0d:e5:b8:e7:bd:a3:82:f6:87:b6:91:
56:a4:c1:c5:d5:78:ef:3e:67:c4:f1:af:0d:13:75:f3:bf:00:
a2:9f:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:26 2024 by rpki-client on console-fra.rpki-client.org