Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
File: UlG0CzMZisWh7fUP_whigWAzXf0.cer (raw, json)
Hash identifier: b2GvhT+eaoJ/zhrQK78Pvcn1ZHO6uGy3e8u2c8kiqVw=
Subject key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0F61D041D373E2323EDF49CD46F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44907
AS: 59930
AS: 62014
AS: 62041
IP: 2001:67c:4e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0f:61:d0:41:d3:73:e2:32:3e:df:49:cd:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:6f:3c:c8:83:04:5d:e5:2f:ce:02:ce:1a:
cc:1a:24:d2:43:13:47:db:5b:b8:f2:b1:ab:c6:78:
7e:fe:0b:0a:8a:db:26:3a:58:48:3f:2a:5b:74:cd:
c3:f0:dc:88:cb:94:8d:49:dc:f3:34:a2:d6:df:76:
72:4d:77:3d:41:0c:c0:ca:1f:bf:29:65:56:a1:cc:
9f:ed:0f:36:a5:fc:4c:06:dd:20:2b:26:56:b6:52:
43:3f:5c:bf:c6:d3:cc:97:37:57:f1:cd:b8:6c:74:
8c:a7:73:2d:cf:2e:9b:ac:29:6c:bd:41:f4:5b:42:
9d:73:66:c8:29:ae:db:bf:c8:e3:f8:1f:56:74:c2:
6e:40:f8:27:29:0b:dc:44:32:b6:89:73:a8:0a:cb:
2c:2d:d9:61:1b:d7:66:14:00:dc:23:02:8e:08:0a:
51:3f:70:4b:f4:33:d0:a0:6a:92:84:36:6a:75:cf:
05:55:09:f3:ff:27:9f:b6:54:9f:fa:ae:13:76:85:
64:c7:08:41:7f:07:61:a5:4a:c7:15:21:e3:46:e6:
9b:74:50:e5:a3:cc:99:14:e6:0c:ad:56:ca:0f:06:
4a:c6:b4:71:7d:c0:75:2a:12:7d:21:5b:71:7d:58:
bf:4c:a6:46:c1:7a:f3:4f:bd:28:01:ec:07:0e:2a:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44907
59930
62014
62041
Signature Algorithm: sha256WithRSAEncryption
0e:8e:2b:27:c1:b8:43:d0:3a:fe:61:20:e0:61:f9:fd:a8:ee:
37:e5:a5:18:0d:09:5b:a6:0c:82:24:9c:21:a0:06:2c:65:0d:
2e:cd:17:5f:a3:1b:f2:ad:2c:8d:7b:a0:cb:4e:0f:34:e3:e2:
e2:b6:a0:a5:9d:bf:64:ec:4e:5a:0c:84:65:b3:dc:2a:66:b1:
45:44:a1:66:c5:fd:97:84:06:88:21:7c:eb:93:69:ec:1b:1d:
72:64:a6:5d:a7:40:c0:63:56:39:17:57:47:cc:b6:a2:47:a7:
67:65:11:00:f7:b1:f2:3e:17:84:75:be:80:b1:0a:c0:9c:3c:
91:3b:ee:4e:d1:3d:64:09:b9:4d:cd:cc:78:c4:11:fd:17:6a:
aa:ae:c8:5e:3b:98:78:99:3d:02:15:80:47:9a:fa:24:5c:f1:
3a:1f:69:41:ef:cc:3f:b9:f6:fe:b0:ad:8b:41:b6:b1:8a:94:
2d:e8:84:6a:c9:22:f3:5c:0e:54:aa:90:f5:da:98:8c:bb:2a:
25:80:13:5c:0a:08:3c:2e:f4:2d:a8:3f:a6:a9:51:87:11:46:
5e:24:5a:9e:c8:86:fd:06:25:a7:62:db:4d:96:2a:08:7c:68:
28:50:0a:af:cd:25:f0:6a:3a:70:b1:7e:c8:8b:5d:bd:3f:a6:
a5:c2:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:43 2024 by rpki-client on console-fra.rpki-client.org