Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer (raw, json)
Hash identifier: 10jnrtEni4ictJWisXNt8J4xVUVsc+TooDIAY8b04+I=
Subject key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424C1DBCF347C0BE57A5C772C1E8AE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199570
IP: 92.243.83.0/24
IP: 149.62.33.0/24
IP: 188.213.232.0/24
IP: 2a13:ad00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:c1:db:cf:34:7c:0b:e5:7a:5c:77:2c:1e:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:0e:86:19:2f:93:d5:2c:90:a3:a3:dd:f0:
ed:bb:1c:04:1d:a7:96:1f:39:5a:63:d6:76:fc:8f:
39:64:6f:85:d0:89:76:00:d0:c3:ba:34:03:49:c5:
79:15:fe:64:67:f3:6e:37:ec:12:ad:d7:75:1d:a3:
ab:ed:be:30:fd:f7:0f:73:24:a3:01:c7:ce:09:86:
6b:7f:ba:2d:05:61:eb:7e:3c:29:bf:c2:dc:9e:69:
cc:a3:85:9a:bb:08:02:5d:7b:b4:77:37:20:0a:2d:
51:c8:9f:dc:30:95:c9:48:62:9e:4a:1e:fd:0a:a7:
fa:a6:c2:ba:f6:af:86:69:fe:58:6d:32:73:87:f5:
23:50:21:06:d8:d4:4c:84:91:6a:66:0b:5d:35:1a:
37:a4:60:b1:ec:67:bc:40:89:8e:14:c4:f3:2d:9c:
b3:41:2e:0b:66:00:65:53:2c:1e:30:7d:49:dd:2a:
5c:d2:e0:1f:ce:c6:86:f3:66:5b:f0:23:48:4f:be:
c2:11:88:2e:55:04:4e:02:a8:97:a9:9f:4c:de:30:
07:a2:73:4b:6a:24:8f:ee:8e:10:f5:e0:65:b6:03:
b2:0e:5a:5c:9b:6b:8d:74:03:2e:c7:5a:e7:dd:86:
0d:3b:ed:7e:f2:04:ce:a7:ba:0c:e0:d2:68:76:0f:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.83.0/24
149.62.33.0/24
188.213.232.0/24
IPv6:
2a13:ad00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199570
Signature Algorithm: sha256WithRSAEncryption
8e:8d:7c:6d:95:1c:1d:dd:c8:a1:7c:7f:00:c0:c6:ff:4d:e6:
58:90:6b:f2:8f:92:6e:c4:71:05:46:1f:50:f0:8d:75:fb:ca:
cf:99:f1:b2:2a:86:94:85:e3:0c:64:73:07:86:2a:e3:90:6b:
b0:48:c8:39:fe:8f:ba:b9:31:e3:b2:3f:03:44:d0:c1:e5:10:
22:f1:35:14:b9:c0:46:53:7b:72:b1:97:f9:de:c9:b1:c0:c2:
b3:9e:2c:56:fa:28:9f:25:18:fe:28:25:f8:a6:77:aa:3a:a7:
7a:86:3a:60:f1:a9:48:8e:70:9a:94:6f:f7:49:d9:de:b0:88:
d0:63:91:64:67:2d:5e:a4:b8:ea:43:68:df:86:aa:07:11:a7:
fe:df:44:ae:55:0c:eb:97:32:92:71:a7:3e:00:dd:18:af:66:
ec:6a:75:a4:d1:b8:fb:02:9f:8f:b1:87:86:71:a9:c8:4f:83:
f2:7c:b8:9d:b8:8e:85:aa:a0:2f:32:45:1f:1a:e4:9f:42:f2:
93:ef:fc:ce:5d:93:dc:80:f5:e5:f9:74:fb:c8:e3:c5:9e:1b:
06:c7:ea:c1:48:a6:c3:36:16:5b:c8:26:dc:67:b5:c0:8c:bb:
c3:78:a7:05:59:18:4c:9d:d2:4c:50:40:9d:c0:02:b9:51:5f:
7e:62:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:45 2024 by rpki-client on console-fra.rpki-client.org