Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
File: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer (raw, json)
Hash identifier: ScWS4nAvsGANRUuBb7vPCj7jMryJAWst7GZr51Mgy64=
Subject key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D0EFD5AEBED308BB24300D7B856A68E51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jan 2024 21:18:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12990
AS: 30876
IP: 37.26.160.0/21
IP: 91.206.172.0/23
IP: 141.105.16.0/21
IP: 178.239.128.0/20
IP: 185.16.128.0/22
IP: 185.104.64.0/22
IP: 195.88.186.0/23
IP: 195.93.178.0/23
IP: 195.177.210.0/23
IP: 213.180.128.0/19
IP: 2a01:9440::/32
IP: 2a02:c10::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:fd:5a:eb:ed:30:8b:b2:43:00:d7:b8:56:a6:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 21:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:6f:a4:64:89:99:e2:18:0e:86:78:71:b8:
28:1a:5c:e2:0e:47:4e:dd:32:19:25:9b:ad:25:b5:
28:35:1e:00:ca:90:70:e0:39:8f:32:22:d0:18:5f:
53:75:b2:a4:c2:26:03:00:0a:49:93:4c:d9:46:e1:
96:34:49:8b:b6:e0:0c:c4:e2:1c:b5:95:17:49:32:
15:a4:bf:dd:d3:92:b2:9d:e7:5c:2d:60:e9:47:99:
ca:24:84:48:42:c8:22:a0:91:e1:f3:22:93:2e:32:
42:1e:09:48:8d:29:59:cb:e3:38:3b:aa:53:d5:de:
fc:cb:fc:4c:f5:bc:1d:b9:59:9b:52:25:60:3e:62:
eb:a2:b2:71:e9:39:37:77:bd:71:5e:41:56:c7:b8:
6b:71:b0:d6:db:0c:d8:99:cc:79:69:5b:8e:77:50:
ac:85:44:c8:3d:be:f6:c8:5e:9e:cd:b4:56:64:95:
36:b9:87:65:6c:de:58:7f:4f:f8:0c:53:bc:8d:fc:
4a:d0:db:2a:0b:c7:ab:e4:27:df:bd:78:77:90:59:
1d:25:3d:af:36:0e:dd:eb:ed:7f:2f:1a:80:1b:42:
c7:6f:7c:48:00:7b:70:69:6e:45:4c:6f:b7:86:40:
91:e7:d0:3b:6a:8b:75:3c:8b:82:c7:f4:9f:88:4e:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.160.0/21
91.206.172.0/23
141.105.16.0/21
178.239.128.0/20
185.16.128.0/22
185.104.64.0/22
195.88.186.0/23
195.93.178.0/23
195.177.210.0/23
213.180.128.0/19
IPv6:
2a01:9440::/32
2a02:c10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12990
30876
Signature Algorithm: sha256WithRSAEncryption
30:40:f4:45:14:d6:88:e5:0d:5b:a9:60:45:4a:fd:20:bd:0a:
36:eb:a8:f8:e2:75:20:dd:dc:4e:a4:09:9c:07:e8:39:15:5b:
96:9b:de:f7:03:98:ad:e4:b1:59:40:6a:b4:87:92:c7:65:d6:
e6:f4:8f:64:32:f6:bc:3a:a4:3d:d4:4b:1b:b1:16:f7:c5:c1:
21:9a:80:93:22:6c:a7:66:8e:c3:04:09:ed:76:84:fc:be:ef:
c9:fe:13:e7:26:c8:d2:49:6a:48:43:d6:ae:3d:18:8b:69:73:
a5:13:78:91:e4:bb:e6:58:6f:a9:2c:e7:a0:6c:34:73:c0:c5:
54:0e:30:54:75:d6:1d:20:89:c2:83:49:46:99:be:05:c0:8a:
09:2e:bb:69:65:fb:f8:e6:d3:f2:51:23:0b:f3:28:ea:ec:83:
25:1b:17:47:66:a6:ef:b8:35:e1:79:8f:b6:b3:dd:4e:b7:d6:
4b:4e:5a:82:79:2a:c7:0f:0e:1a:9e:64:60:48:d7:ab:c4:f7:
73:c9:81:ef:29:89:6f:02:e9:5e:b2:09:98:12:db:2e:9a:b2:
66:7f:d4:2f:3c:32:8a:0a:a2:2a:61:d6:75:24:16:8b:30:13:
57:ac:e0:6e:b7:1f:86:8e:93:6d:33:90:97:58:40:1b:c2:d5:
cc:af:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:45 2024 by rpki-client on console-ams.rpki-client.org