Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
File: UusD0hGZbpmknjw_nOSz8qFXI8U.cer (raw, json)
Hash identifier: bhheLuu1183l147tCLkDvYrGQDvOKeUD+C7f7q3njzQ=
Subject key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9369C70797046BCAB118FFC95C949
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47267
IP: 91.199.17.0/24
IP: 185.182.160.0/22
IP: 2001:67c:69c::/48
IP: 2a0f:eb80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:9c:70:79:70:46:bc:ab:11:8f:fc:95:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:e6:60:ef:97:34:e0:c9:bb:51:30:2c:d8:
bb:24:df:c2:0a:24:50:5c:52:28:58:ca:7b:03:dd:
1c:7f:ac:84:77:32:ca:c7:92:a2:7f:e5:41:7a:69:
28:42:bd:12:3a:15:a0:cd:c0:27:62:d2:e8:78:73:
6a:dc:f4:45:06:fc:bb:84:c1:43:1e:46:f4:97:40:
54:be:fd:ed:f9:bb:c3:c6:4b:e2:b5:56:10:90:d8:
7c:6c:86:c9:39:15:54:b8:97:b8:ac:94:92:a9:b8:
7a:6a:cb:88:e8:c7:dc:47:d0:7e:72:b1:dc:04:9f:
2b:9f:0f:f4:a5:f6:11:66:95:2a:db:d8:69:3d:2f:
80:99:eb:9f:c5:c0:0b:cd:44:e2:b6:34:31:3e:8e:
f0:e0:f9:1a:ad:3e:00:3f:fd:34:f6:b8:d2:5d:c5:
ac:28:62:c0:82:fd:c3:ae:0c:2b:50:ba:8d:f9:89:
10:65:78:a2:af:41:21:bf:70:19:11:74:80:f0:8d:
67:ed:15:0d:a2:5d:46:c4:0a:32:f0:dc:00:2a:d3:
41:6d:5c:6b:1f:dd:f0:0c:6d:d7:15:30:07:b2:c5:
4f:82:d9:3f:53:d2:0c:25:45:e0:4d:de:84:c7:41:
dd:48:c3:e9:36:6d:5c:4d:9e:70:96:1d:6d:0b:17:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.17.0/24
185.182.160.0/22
IPv6:
2001:67c:69c::/48
2a0f:eb80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47267
Signature Algorithm: sha256WithRSAEncryption
59:1d:c6:e2:fb:3d:e8:67:84:d8:1e:13:53:3a:87:6a:e8:3d:
71:49:08:84:4d:2e:49:5e:06:df:e7:91:4c:2c:d2:e4:ea:d4:
c0:80:16:5f:d8:44:83:8e:b4:08:ae:71:66:21:34:e6:fb:e0:
1c:4a:5a:6d:39:8a:5f:54:ac:2f:0f:14:36:89:a1:90:76:94:
9c:99:3d:fa:b3:c4:d6:af:82:b1:68:4b:7c:a3:13:2b:ac:75:
8f:af:fd:5b:4e:c8:e6:13:1a:f8:96:9e:05:78:83:15:9e:32:
59:0b:fc:2e:8b:47:de:7c:95:4a:cb:73:cb:14:4c:60:ee:d7:
f5:e0:e3:83:23:9d:45:ab:8b:de:14:a8:af:c0:c4:fc:cb:77:
b8:60:10:46:e4:97:6b:ec:e9:2d:c4:cd:63:9c:b8:16:13:05:
d0:5f:89:35:a9:a7:54:8b:79:a4:21:eb:98:a2:66:d9:e0:69:
39:dd:b4:25:27:56:41:72:93:7f:23:84:56:85:d9:9f:9e:26:
08:03:ed:fc:fe:54:58:a8:02:96:b7:fc:25:ba:e8:28:09:65:
2a:0b:19:6e:d4:e6:41:ce:a6:3b:d1:de:5b:5b:62:67:98:b9:
89:02:b3:7f:ae:e0:ab:c8:cf:84:4a:19:60:0f:0e:b6:36:81:
ce:34:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:02:12 2024 by rpki-client on console-fra.rpki-client.org