Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.cer (raw, json)
Hash identifier: 4EeXavhHuAmrGm4VAY5+mUbG4zt89LH1n88zO6//vEg=
Subject key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72A9AA68F22EA461FD812DE2307FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43927
IP: 45.131.128.0/22
IP: 46.102.240.0/21
IP: 77.81.240.0/21
IP: 89.32.144.0/21
IP: 89.33.197.0/24
IP: 89.45.248.0/21
IP: 91.188.224.0/22
IP: 92.114.98.0/24
IP: 93.113.174.0/24
IP: 185.105.32.0/22
IP: 185.125.108.0/22
IP: 185.199.172.0/22
IP: 185.250.104.0/22
IP: 188.240.47.0/24
IP: 188.241.112.0/21
IP: 2a06:cd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:9a:a6:8f:22:ea:46:1f:d8:12:de:23:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5336107179715609dca422bc07a098468c529452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:06:1c:be:e5:67:88:01:bc:63:a8:d8:de:
75:4c:9a:14:af:8f:7c:92:67:fa:2c:64:d8:3f:f0:
7e:bb:8c:c3:1e:15:63:ad:b8:26:30:61:84:a3:09:
70:40:59:ec:0e:ac:ce:a0:94:00:7b:88:ac:6b:92:
5c:54:a2:b1:5b:d4:6e:03:e8:5c:5f:35:7a:d5:84:
f8:56:fd:cd:68:88:f2:f2:4b:a1:40:a8:32:ab:3b:
11:43:93:22:a3:d2:aa:7e:0e:e8:a1:0c:85:fd:04:
2e:a6:2f:cb:17:d3:41:d6:84:5f:f9:9a:4d:86:b7:
05:3a:0f:52:2f:58:8a:0f:b0:53:5b:70:02:23:0a:
28:83:c2:43:f8:f3:a4:5d:d9:16:36:61:d7:bd:8f:
e7:b9:e1:8e:98:ad:19:6d:eb:ec:fc:2e:39:3a:de:
4a:99:92:fd:de:6a:6f:86:64:a3:e7:8e:3d:22:43:
91:a2:b2:77:67:56:a0:6b:a1:39:0e:e1:d8:f6:39:
41:23:64:95:1d:1d:df:a2:30:04:65:e9:ad:9e:9d:
f8:02:b0:1c:61:d6:58:95:87:48:64:a4:c3:3c:8a:
21:19:79:92:76:7d:19:7e:de:8f:3b:73:7f:60:a5:
56:09:a7:71:9f:1c:36:7f:86:16:10:5c:9a:ea:88:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.128.0/22
46.102.240.0/21
77.81.240.0/21
89.32.144.0/21
89.33.197.0/24
89.45.248.0/21
91.188.224.0/22
92.114.98.0/24
93.113.174.0/24
185.105.32.0/22
185.125.108.0/22
185.199.172.0/22
185.250.104.0/22
188.240.47.0/24
188.241.112.0/21
IPv6:
2a06:cd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43927
Signature Algorithm: sha256WithRSAEncryption
02:ba:65:19:e1:73:8a:2f:39:9e:ab:e5:43:c3:6a:fe:5e:ae:
ca:b1:b3:77:46:04:10:3b:48:52:18:67:47:ab:f5:b2:76:a8:
31:5e:1a:66:03:ee:47:c1:fc:22:33:8a:c0:31:cb:07:f9:68:
0c:2e:bd:9b:30:a2:c6:de:aa:b5:e5:ba:77:d3:4d:1e:ca:39:
0c:0c:c7:33:f3:55:37:4d:74:3f:4a:01:21:03:25:05:f0:95:
7c:a7:1b:d6:c3:ee:2f:22:99:63:e4:b1:5e:5d:4c:2f:59:bb:
d1:70:f6:3a:c4:e4:fb:f2:96:ea:0e:73:ba:86:e2:ad:3b:fb:
fe:dd:66:8d:88:c1:e4:ca:15:05:f4:e0:5a:9d:9a:8d:37:34:
12:b6:dc:92:d0:e4:9a:60:b9:ea:a4:6a:4b:a0:fa:55:5f:6d:
75:63:fe:a4:ea:9b:79:79:e6:19:ff:e8:da:e6:5b:ac:f4:fc:
c0:c6:d6:85:1f:c4:0d:61:6c:62:ad:3c:41:16:f3:ac:e4:2a:
f4:33:8f:c1:3b:5b:bd:b2:60:95:2d:46:82:34:44:99:fa:64:
52:85:92:76:47:ea:57:c3:b5:33:57:d0:ac:99:df:65:5b:62:
d2:3c:ab:b2:37:12:e1:f5:2d:c4:8b:75:85:48:1f:7f:f7:12:
cb:62:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:10 2024 by rpki-client on console-fra.rpki-client.org