Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
File: UhqgJHWNjRBOEXnFUDmBZjav4pg.cer (raw, json)
Hash identifier: pjjr6O3PUn91cwMaqZTozWRgOoW+x1iKYnekf8K3o4s=
Subject key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AFA629BDC8F2ECE67AF128DCF6133
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20626
IP: 62.168.128.0/19
IP: 83.216.96.0/19
IP: 185.75.40.0/22
IP: 2001:b58::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fa:62:9b:dc:8f:2e:ce:67:af:12:8d:cf:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=521aa024758d8d104e1179c55039816636afe298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:6c:ba:53:49:13:d0:b5:28:76:34:6b:a1:
f3:2a:e4:c6:f2:02:57:47:e5:0b:d2:d7:2d:e6:68:
cf:ce:6b:c2:92:2e:43:ac:26:70:23:d5:6a:38:8a:
a1:42:a1:7f:f2:63:09:2a:1b:ef:06:99:65:85:6b:
ef:84:8b:5e:c2:55:1c:59:7a:a3:5d:b1:03:78:ad:
78:dd:c8:8c:c2:7a:04:a2:55:04:c5:2f:53:47:b5:
87:80:63:7f:c5:74:59:b8:90:21:18:ca:c8:5b:b6:
55:95:89:b9:d2:e4:f2:61:61:c1:77:96:cc:8f:d1:
b2:c3:9b:cd:4d:b0:2b:96:70:81:cc:6e:3d:66:bd:
b4:4d:1e:0d:7f:9c:aa:8c:b0:e8:e8:6b:b3:54:6b:
2c:d8:ff:a7:2e:88:8d:1d:60:28:c7:47:e3:a0:9b:
8f:4d:f7:cb:e4:7d:9b:d6:4d:62:18:e9:37:53:af:
a4:4a:ec:5b:91:75:6d:2a:b5:34:d3:40:9a:3e:9e:
f5:7e:c6:25:f7:d4:4b:9e:7f:3b:d5:f2:48:e2:72:
2b:87:b6:3c:5d:5a:84:f6:de:9d:61:da:e8:6a:34:
5e:84:7a:4a:0c:12:ba:c7:f5:50:6d:3b:1d:43:12:
e7:93:21:21:24:14:9c:5c:0f:ef:8b:f5:58:c4:da:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.168.128.0/19
83.216.96.0/19
185.75.40.0/22
IPv6:
2001:b58::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20626
Signature Algorithm: sha256WithRSAEncryption
0d:43:f9:81:36:aa:f4:2a:15:44:fb:1e:17:03:a5:51:c5:5f:
87:ee:c2:1a:61:fa:52:da:b7:43:ac:4f:1c:97:9f:d4:2d:c6:
dd:27:a5:92:f4:78:00:c3:95:a6:27:49:9f:0a:29:2d:c5:75:
f2:9e:03:83:7e:c8:8f:6e:f7:a6:00:e8:a3:e4:48:ab:0f:f0:
69:7d:cd:50:69:c5:da:76:e7:28:3a:69:e2:ce:dd:a3:64:28:
8b:e6:67:10:12:36:7a:08:e7:08:92:70:06:37:14:cb:e4:f5:
5d:d3:1a:f6:5a:9c:a7:9f:91:fe:bc:e9:c9:5b:40:af:ef:03:
57:68:c1:06:d8:cf:39:a2:92:1b:17:a9:82:f3:6c:43:9b:7e:
57:ef:33:f2:7e:b2:0c:bd:61:e2:f0:02:15:33:e6:80:fd:ea:
d2:77:ec:0c:20:93:6d:92:3d:a8:b7:78:e3:1d:30:69:14:61:
29:b0:0e:1c:ba:71:03:60:87:ff:ed:bc:ce:12:bc:19:79:d5:
7e:6f:ba:5d:84:94:19:15:ba:f0:90:70:4b:d0:59:c9:e4:59:
3f:46:2e:4d:51:4b:f6:6a:fe:9d:62:3b:55:99:0c:19:b8:6d:
40:a7:da:df:f0:e4:38:4b:c0:44:74:42:99:4a:21:d9:71:a7:
25:35:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:59 2024 by rpki-client on console-fra.rpki-client.org