Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.cer (raw, json)
Hash identifier: wlgtEisxsfxknxooZddA21L7dU8nHhe1Xk/vk8IpenI=
Subject key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914DA61F4BB9FAC3EF1DBDF654776F6DBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Aug 2024 21:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206754
IP: 185.194.112.0/22
IP: 2a0a:4a40::/29
IP: 2a14:5340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Sep 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:a6:1f:4b:b9:fa:c3:ef:1d:bd:f6:54:77:6f:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 21:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:67:f2:ee:f4:c5:71:bb:3a:d5:6c:5e:f7:
8a:1d:75:2e:36:5d:53:6c:83:3e:33:7b:8c:62:03:
42:9d:32:15:4f:04:1a:97:c4:ba:c4:7e:9b:f3:51:
d5:71:1b:bd:40:6c:56:b5:c7:4b:7a:4d:f9:9a:1f:
e6:5b:ec:7a:d4:4c:14:3b:7b:9f:d0:c9:48:ef:98:
db:72:c8:1c:79:e6:c8:57:d9:10:5f:56:85:c3:4b:
db:a6:ac:90:44:07:fa:73:23:3b:c5:0c:40:d7:11:
53:04:da:28:57:11:8c:26:51:0d:f7:8e:20:a6:97:
65:d4:b5:2f:99:4b:6d:2a:16:76:84:44:44:95:6d:
be:88:b5:b4:32:1f:65:e8:a9:69:04:98:ae:e9:1f:
dd:16:ef:e1:0d:da:24:e7:69:69:3d:4d:42:5c:e7:
d6:b6:a6:31:77:8e:5c:d4:84:b6:b6:ef:be:09:91:
d6:2d:d6:8e:a7:0e:69:5b:d7:e8:9c:a8:b1:a0:25:
08:b8:6c:e4:17:5c:f1:96:c7:ae:25:70:73:db:4b:
dd:1b:ad:4e:13:f7:9f:eb:15:94:61:ce:38:3a:f1:
a2:b4:51:fa:cd:37:d1:1c:2f:82:3a:f8:87:d2:41:
f6:8d:47:a8:63:49:37:fd:40:e4:35:f3:4b:46:06:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.112.0/22
IPv6:
2a0a:4a40::/29
2a14:5340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206754
Signature Algorithm: sha256WithRSAEncryption
67:9b:88:9b:82:99:9b:f4:87:fb:da:59:48:4e:9f:a7:39:69:
e2:92:61:1c:f9:12:2f:ed:a7:cb:6b:bf:19:b7:82:39:9e:ff:
d6:03:03:25:43:2d:15:8b:88:91:65:31:2c:4d:b4:9d:c4:73:
ff:26:1c:09:34:55:79:33:8c:67:34:3a:26:e9:7f:b1:92:f0:
9a:5a:7e:71:a7:8b:a9:40:28:19:f9:b6:ee:9b:0d:90:0b:06:
8b:a8:f3:10:38:8b:03:ea:90:ee:55:7a:81:1a:03:0d:82:d5:
32:df:cd:a4:a1:9a:0b:f0:0d:4c:2f:75:1f:97:56:e6:c1:41:
40:34:22:0d:fa:76:e3:b6:b1:b4:19:59:4c:86:26:bc:c6:85:
55:03:cc:d8:48:4a:17:1b:7c:fd:7a:69:55:43:f0:33:1f:08:
46:37:60:27:77:8c:5e:33:8c:60:7b:89:e6:87:6e:ab:39:e1:
d8:bf:ed:29:89:ee:a1:3b:55:b3:18:08:10:bb:e2:cc:c9:4f:
0e:b0:20:c8:0b:d1:2a:f9:fd:32:9d:09:25:ce:48:0c:c6:29:
75:c9:9e:c7:5e:30:2a:78:03:bd:75:8b:98:47:bb:28:70:71:
44:0e:ec:ad:9c:46:d9:4e:20:bf:87:e3:a5:21:a3:f3:3a:db:
ed:83:f1:af
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZFNph9LufrD7x299lR3b226MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODEzMjEzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjFhMzAwNzcyMjNjMjVjNmYzN2RjZjU5NDgwNzc4YzBiNWIxMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwtn8u70xXG7OtVsXveKHXUuNl1T
bIM+M3uMYgNCnTIVTwQal8S6xH6b81HVcRu9QGxWtcdLek35mh/mW+x61EwUO3uf
0MlI75jbcsgceebIV9kQX1aFw0vbpqyQRAf6cyM7xQxA1xFTBNooVxGMJlEN944g
ppdl1LUvmUttKhZ2hERElW2+iLW0Mh9l6KlpBJiu6R/dFu/hDdok52lpPU1CXOfW
tqYxd45c1IS2tu++CZHWLdaOpw5pW9fonKixoCUIuGzkF1zxlseuJXBz20vdG61O
E/ef6xWUYc44OvGitFH6zTfRHC+COviH0kH2jUeoY0k3/UDkNfNLRgZVVQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzZiMTE1
MS1iMDVhLTRhMDItYTg4My0wZjVmMDliMmViMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvNmIxMTUx
LWIwNWEtNGEwMi1hODgzLTBmNWYwOWIyZWIxNC8xL1Vob3dCM0lqd2x4dk45ejFs
SUIzakF0YkVHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF
BwEHAQH/BCYwJDAMBAIAATAGAwQCucJwMBQEAgACMA4DBQMqCkpAAwUDKhRTQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJ6IwDQYJKoZIhvcNAQELBQADggEBAGeb
iJuCmZv0h/vaWUhOn6c5aeKSYRz5Ei/tp8trvxm3gjme/9YDAyVDLRWLiJFlMSxN
tJ3Ec/8mHAk0VXkzjGc0Oibpf7GS8JpafnGni6lAKBn5tu6bDZALBouo8xA4iwPq
kO5VeoEaAw2C1TLfzaShmgvwDUwvdR+XVubBQUA0Ig36duO2sbQZWUyGJrzGhVUD
zNhIShcbfP16aVVD8DMfCEY3YCd3jF4zjGB7ieaHbqs54di/7SmJ7qE7VbMYCBC7
4szJTw6wIMgL0Sr5/TKdCSXOSAzGKXXJnsdeMCp4A711i5hHuyhwcUQO7K2cRtlO
IL+H46Uho/M62+2D8a8=
-----END CERTIFICATE-----
Generated at Sat Sep 21 09:21:34 2024 by rpki-client on console-ams.rpki-client.org