Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
File: UnrRl4bdVLNaS5atP7xXkyeORHQ.cer (raw, json)
Hash identifier: OzDOFQYSy2szHeZIwteuXISyGkYO9v0kdaTs8DK3SbQ=
Subject key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425596924642A1DCBEDD2FC3BC6373A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49263
AS: 56726
AS: 57014
AS: 59816
IP: 185.70.132.0/22
IP: 185.241.36.0/22
IP: 185.251.224.0/22
IP: 185.254.88.0/22
IP: 194.147.120.0/22
IP: 2a05:2a00::/29
IP: 2a0c:1e40::/29
IP: 2a0c:49c0::/29
IP: 2a0c:af80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:69:24:64:2a:1d:cb:ed:d2:fc:3b:c6:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:d6:f1:8c:fc:c1:3d:1f:59:50:5d:74:be:
87:07:67:ab:a1:5d:c5:8f:ba:c9:5a:78:fa:07:97:
55:23:f8:98:3d:97:06:0e:cc:f4:6a:32:9b:0f:52:
8b:09:ac:9e:37:8c:bc:7f:bd:f4:cb:ba:ef:76:71:
12:dd:ec:1a:45:86:87:eb:54:99:95:e0:af:80:af:
6a:0b:b1:c6:13:6b:57:92:a4:e3:ca:72:b4:b3:7c:
68:a6:3c:8c:2f:cf:70:63:49:21:9f:d4:47:fd:3c:
fe:68:b0:82:0c:ee:18:ce:2a:2f:6c:ab:97:fe:20:
e8:0e:e0:d2:98:80:06:7c:b7:35:3f:cd:2c:f8:58:
aa:ca:47:21:03:02:55:4d:f6:4c:7d:19:bd:26:4d:
5f:0b:8e:77:15:dc:c7:11:77:b5:32:c6:88:e9:d2:
97:a1:84:d2:18:5f:8e:18:63:4f:cc:4b:6e:20:9f:
14:59:9d:a4:90:3c:0c:96:45:23:5c:8c:98:09:85:
76:ab:b4:8a:42:15:63:cf:38:33:1e:61:70:26:91:
86:a0:3e:69:39:d5:61:b6:6c:bc:64:eb:14:30:5f:
d1:a0:91:b8:8b:ca:66:a9:0c:21:c5:32:4c:6e:94:
0d:a4:2c:64:d7:97:95:2b:f5:70:d7:77:ee:75:d7:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
2a0c:1e40::/29
2a0c:49c0::/29
2a0c:af80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49263
56726
57014
59816
Signature Algorithm: sha256WithRSAEncryption
9f:28:e5:12:f8:7f:91:11:fb:08:b2:dc:cf:5d:a4:7d:70:de:
37:1a:b5:5a:9d:d7:c2:a5:21:d4:54:ec:07:c8:9c:60:64:aa:
f7:42:bb:a6:d3:b2:f4:18:1f:8a:05:ad:b5:29:b4:d3:9c:dc:
05:27:3a:73:c2:96:b9:ba:89:19:a5:3c:88:08:b8:60:cd:4f:
df:2e:13:73:22:64:fe:6b:57:2d:6b:12:59:ef:7a:46:77:18:
e0:89:31:3a:24:a4:5e:63:95:0d:5f:e0:6f:52:31:35:ec:9e:
c4:ac:69:8c:de:54:f3:46:e7:65:c3:7f:b0:c8:28:0d:2a:a3:
eb:db:06:18:eb:ed:38:1b:81:c4:e3:05:33:c2:00:ef:5f:7f:
a4:16:8a:eb:67:78:a7:39:bc:ae:bd:86:b2:ae:8d:5b:44:a0:
fb:d2:03:0e:45:5e:c2:8c:55:83:99:34:1c:47:f8:4c:41:9e:
0d:c1:fd:f0:79:2f:24:37:33:17:1a:ec:76:ea:1e:75:53:71:
c6:fb:c7:f4:ab:76:38:06:56:90:20:6a:fb:ef:a4:d0:9e:f6:
6d:22:cc:d8:6e:8b:f9:55:f2:26:af:37:5d:ed:e0:8b:3b:40:
36:87:05:9f:9d:d1:c5:2e:95:b0:ad:fd:e2:20:d7:69:57:72:
1a:82:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:14:13 2024 by rpki-client on console-ams.rpki-client.org