Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json)
Hash identifier: fgZT+VwQLG+N6MREs8i1zT3W/EmHsgwSRZPbvJguxs0=
Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0A184CCCB91AC16FC8DCE66822660B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 15:32:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6206
AS: 44259
AS: 47869
AS: 62349
IP: 31.171.128.0/21
IP: 37.46.192.0/21
IP: 91.199.50.0/24
IP: 91.230.225.0/24
IP: 94.185.80.0/21
IP: 94.228.208.0/20
IP: 109.235.48.0/21
IP: 185.153.188.0/22
IP: 185.196.92.0/22
IP: 194.110.67.0/24
IP: 195.191.144.0/23
IP: 2a00:dd0::/32
IP: 2a07:6580::/29
IP: 2a07:8840::/29
IP: 2a0a:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:18:4c:cc:b9:1a:c1:6f:c8:dc:e6:68:22:66:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 15:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a:
59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36:
22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0:
93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a:
67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43:
8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d:
8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8:
e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68:
38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2:
e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40:
cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a:
64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4:
53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84:
40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46:
a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7:
79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f:
b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/21
37.46.192.0/21
91.199.50.0/24
91.230.225.0/24
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
185.153.188.0/22
185.196.92.0/22
194.110.67.0/24
195.191.144.0/23
IPv6:
2a00:dd0::/32
2a07:6580::/29
2a07:8840::/29
2a0a:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6206
44259
47869
62349
Signature Algorithm: sha256WithRSAEncryption
08:35:72:9f:48:51:fb:b7:bf:9d:6c:59:82:fe:94:48:52:51:
6c:d7:cb:dd:e9:61:26:29:ef:d9:3a:cc:f5:47:a7:ac:2a:bb:
46:6e:32:32:a2:75:aa:e2:d5:22:d1:29:a4:3d:35:4d:2d:a6:
46:1b:7b:c6:e0:a9:ed:26:c3:09:ed:4e:51:18:86:aa:8b:2f:
83:7e:c1:14:97:47:c5:1d:c2:a5:40:56:5f:ab:54:08:ec:bf:
79:c9:27:cc:b0:ac:e4:7d:34:31:9f:3a:e2:19:91:24:9b:90:
d6:70:a7:41:be:40:9d:c9:49:8e:20:dc:ef:b7:90:9d:dc:3e:
9c:db:25:07:c4:12:30:f1:de:50:48:dc:09:6d:09:e5:7b:ec:
3a:f4:2a:79:da:d0:91:33:f8:0d:56:44:97:3f:43:70:7c:37:
d2:6d:50:d9:71:d1:85:85:b5:12:f8:9c:95:16:97:7d:59:88:
9c:00:a0:f2:90:08:e4:7e:81:a3:dd:3d:de:b8:e2:81:d0:cc:
43:fd:67:cc:ca:dd:02:3e:16:e2:3c:6c:b7:ff:ff:97:24:f7:
26:fb:67:e9:bd:50:ff:19:d2:a3:57:34:91:34:fb:4d:31:db:
4c:9a:f8:ea:b8:af:9b:c5:94:e8:6c:c1:6e:d2:f9:e2:36:e4:
0f:56:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:52 2024 by rpki-client on console-ams.rpki-client.org