Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer (raw, json)
Hash identifier: hkku7UAdXSdilPG5mh0zdcnJaL2UtQMTmY261a9qIcA=
Subject key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFB1905C98372BCB4C16AA81ABA9BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20902
IP: 46.229.0.0/20
IP: 80.73.96.0/19
IP: 80.88.64.0/20
IP: 109.239.160.0/20
IP: 185.76.40.0/22
IP: 194.0.184.0/24
IP: 2001:67c:2088::/48
IP: 2a00:1230::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b1:90:5c:98:37:2b:cb:4c:16:aa:81:ab:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:8a:7b:9c:17:66:55:03:50:bf:34:32:bc:
2b:72:65:e0:59:8c:8f:d1:f8:de:2c:cf:e1:ef:ed:
ba:b0:d1:5e:e3:0a:57:e6:2b:f4:e4:9f:87:af:bc:
fd:55:44:46:7b:c1:65:0a:3f:4f:1d:be:25:45:07:
01:91:3a:f9:43:44:15:9a:dd:cc:22:f4:3c:b6:43:
ef:50:b5:c5:1a:2f:22:9a:2e:89:f7:81:f0:5b:99:
5c:ba:de:bc:ad:3b:aa:74:1c:dc:1c:8b:ea:2a:03:
09:a3:a7:ef:d8:4b:94:0a:9a:d9:3a:e5:43:6f:ff:
59:06:5f:85:c7:02:1b:75:53:1a:74:f0:99:69:1c:
45:63:a3:46:d1:c7:6a:7b:eb:a1:9b:93:62:13:33:
12:78:b8:5d:9a:3e:8f:0c:70:36:eb:45:a6:78:0b:
7f:31:79:c4:9d:df:56:7c:1c:91:c7:10:20:94:c2:
06:17:72:91:68:b2:6e:8b:45:91:06:40:91:cf:fd:
0a:b3:8d:33:f2:a5:da:df:a4:e9:95:05:e7:15:80:
0c:fb:f2:2b:e5:6f:91:29:52:97:98:c1:b8:a2:15:
98:a9:c1:ec:30:30:25:5c:a2:65:17:44:fc:84:08:
4d:b8:a8:7b:d1:31:78:b3:15:e8:54:07:ac:f1:1b:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.0.0/20
80.73.96.0/19
80.88.64.0/20
109.239.160.0/20
185.76.40.0/22
194.0.184.0/24
IPv6:
2001:67c:2088::/48
2a00:1230::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20902
Signature Algorithm: sha256WithRSAEncryption
36:10:bc:18:bb:16:c2:a4:30:47:4e:28:7b:11:48:c5:ce:75:
73:56:eb:1e:65:28:0a:38:33:fe:83:af:57:f2:07:a4:34:9b:
1d:0e:c2:fa:a0:49:47:7b:d8:d4:63:b0:4a:bf:9f:ef:82:ed:
e2:bd:e3:79:fa:9b:16:1e:fd:82:c0:2f:1c:80:1f:e9:ff:60:
a3:15:ff:eb:d2:6f:b0:47:5c:ba:3b:03:b9:63:8d:54:3f:61:
f0:39:95:ff:ee:ae:51:bc:cf:71:af:59:f3:71:ae:cb:ee:c6:
72:fa:71:c5:cb:df:90:04:e9:0e:03:e4:5b:b4:99:89:b6:48:
cc:d7:01:73:18:78:47:bc:b7:8c:97:0d:2c:94:28:cb:03:bf:
93:4a:66:f5:44:34:fd:9e:c9:ba:c0:60:37:5c:c2:af:08:37:
49:3a:74:18:f9:d3:53:6f:a6:4d:b8:92:1c:98:a9:f8:b7:7d:
12:37:32:56:22:f0:2e:24:14:f7:d0:de:45:1d:6f:b2:4f:90:
b4:a9:59:68:7b:fa:9c:a5:3e:0a:a4:ba:8f:44:b5:ce:b0:64:
d5:ae:f9:99:c0:26:6d:0d:3a:1c:c4:76:85:4a:9c:80:fc:7a:
e7:14:6b:20:2a:9d:de:e5:9e:62:ca:41:06:5f:f8:47:d6:d2:
ec:86:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:04:33 2024 by rpki-client on console-ams.rpki-client.org