Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
File: UlkVtMckB6-3lB5b4pSscTOxB7M.cer (raw, json)
Hash identifier: qZsEytTe+sExLkHWU56K09SqAB3VgPWrGJBSbSeQsTc=
Subject key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7273B5A37F0425D79646448FC1F3F62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44683
IP: 45.152.244.0/22
IP: 2a0f:6d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3b:5a:37:f0:42:5d:79:64:64:48:fc:1f:3f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=525915b4c72407afb7941e5be294ac7133b107b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:fe:8c:d1:3f:85:3e:6c:a2:55:e6:31:2a:
46:15:9e:1e:8a:d5:6c:e5:99:d3:85:07:77:79:9b:
6e:fa:8f:30:d9:67:ff:55:d2:ef:d0:cd:f3:1d:cb:
32:94:01:60:e2:d2:b8:cc:48:5c:a0:3f:71:c5:bd:
83:5c:3d:69:29:f2:73:a8:a2:e1:ba:22:15:41:c3:
7e:6e:bd:ec:3c:11:2d:06:f8:1d:e0:86:04:1f:82:
07:f6:77:9e:b6:ae:0f:bd:c3:29:6d:54:34:d2:e4:
7a:70:61:17:6b:3a:0b:99:c3:79:c8:f8:be:71:21:
0b:68:e0:ee:53:53:af:29:02:5b:e3:b4:04:6b:45:
28:08:71:07:04:13:3d:8c:ca:cd:72:2b:b3:db:6c:
5a:52:d4:01:fe:d2:aa:a0:27:0c:6c:ab:fd:44:61:
fd:ae:aa:eb:f2:25:7f:06:45:c7:88:3a:8c:01:87:
d4:3f:4b:13:4f:84:8b:6b:3d:83:53:43:b1:47:cb:
8b:c4:3b:56:28:1b:b3:82:d2:a4:b0:f2:07:19:9b:
18:14:f2:a8:a7:4a:57:89:e6:b2:bf:3d:92:61:88:
ce:94:fa:26:0e:93:98:41:56:8d:06:c9:e6:57:6b:
67:13:75:7a:6b:a0:e6:6d:ac:74:1d:10:9a:7d:c0:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.244.0/22
IPv6:
2a0f:6d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44683
Signature Algorithm: sha256WithRSAEncryption
46:98:4e:e3:de:01:d5:a1:9c:ab:2e:7d:7d:35:5a:24:92:1d:
24:46:6e:20:af:31:fd:0e:b2:0b:fa:53:3e:2b:a8:26:cb:2a:
c7:7f:f3:43:0e:fa:b1:f3:05:0e:15:a3:11:b4:98:d5:db:be:
67:fb:27:02:cb:4e:f9:8b:52:f1:f5:26:7b:7e:4f:99:73:6b:
29:ea:4e:60:7f:ac:0f:a6:9d:ec:c9:1c:0b:a6:1c:a4:ce:e1:
2c:44:42:96:d5:72:f4:5e:cd:6a:9f:e4:23:40:14:d1:d7:44:
a2:ed:4a:b1:14:30:d7:b7:a2:f8:de:49:fb:eb:2b:a7:c9:8c:
33:31:9b:e0:2d:e4:35:13:3d:bf:88:5d:73:e2:e5:f4:26:44:
0a:57:e8:99:e9:55:8f:dc:e2:c1:ca:85:f0:59:21:8d:06:04:
3f:f7:a6:d9:fd:56:ac:78:ba:60:75:84:3b:32:c8:95:52:62:
1d:ca:51:1d:1a:4a:dd:7d:5f:3f:fe:5b:96:a2:79:95:2e:7c:
5a:e8:53:3d:27:82:b8:a4:82:19:f0:75:ff:a1:bd:e6:b5:a0:
05:d2:14:6d:54:55:cc:ac:8f:14:4f:3f:ae:0a:05:3b:71:b9:
11:ea:a7:b2:32:36:70:1e:a4:3b:21:66:09:52:b7:77:c3:77:
c9:aa:3a:d9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHJztaN/BCXXlkZEj8Hz9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjU5MTViNGM3MjQwN2FmYjc5NDFlNWJlMjk0YWM3MTMzYjEwN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIT+jNE/hT5solXmMSpGFZ4eitVs
5ZnThQd3eZtu+o8w2Wf/VdLv0M3zHcsylAFg4tK4zEhcoD9xxb2DXD1pKfJzqKLh
uiIVQcN+br3sPBEtBvgd4IYEH4IH9neetq4PvcMpbVQ00uR6cGEXazoLmcN5yPi+
cSELaODuU1OvKQJb47QEa0UoCHEHBBM9jMrNciuz22xaUtQB/tKqoCcMbKv9RGH9
rqrr8iV/BkXHiDqMAYfUP0sTT4SLaz2DU0OxR8uLxDtWKBuzgtKksPIHGZsYFPKo
p0pXieayvz2SYYjOlPomDpOYQVaNBsnmV2tnE3V6a6Dmbax0HRCafcDs2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFJZFbTHJAevt5QeW+KUrHEzsQezMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1Lzg1MTcw
OC0xOWY5LTRlY2MtYTQ0Mi0wY2UzYTJlZmM4ZGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvODUxNzA4
LTE5ZjktNGVjYy1hNDQyLTBjZTNhMmVmYzhkZC8xL1Vsa1Z0TWNrQjYtM2xCNWI0
cFNzY1RPeEI3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZj0MA0EAgACMAcDBQMqD20AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCuizANBgkqhkiG9w0BAQsFAAOCAQEARphO494B1aGc
qy59fTVaJJIdJEZuIK8x/Q6yC/pTPiuoJssqx3/zQw76sfMFDhWjEbSY1du+Z/sn
AstO+YtS8fUme35PmXNrKepOYH+sD6ad7MkcC6YcpM7hLERCltVy9F7Nap/kI0AU
0ddEou1KsRQw17ei+N5J++srp8mMMzGb4C3kNRM9v4hdc+Ll9CZEClfomelVj9zi
wcqF8FkhjQYEP/em2f1WrHi6YHWEOzLIlVJiHcpRHRpK3X1fP/5blqJ5lS58WuhT
PSeCuKSCGfB1/6G95rWgBdIUbVRVzKyPFE8/rgoFO3G5EeqnsjI2cB6kOyFmCVK3
d8N3yao62Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:43 2024 by rpki-client on console-fra.rpki-client.org