Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
File: c_umgtacHRBwjte2rqojLuibkB0.cer (raw, json)
Hash identifier: 9rYqfnkm7UYpMny5HKhTmIqFfFwtFSn/hFNiUFyNpuw=
Subject key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2733EF0F129E27E0ECE196474972
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29121
IP: 195.69.96.0/22
IP: 2001:67c:2368::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:27:33:ef:0f:12:9e:27:e0:ec:e1:96:47:49:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:1b:c3:fc:92:86:a9:3f:ea:e0:0c:4f:68:
99:32:0d:6a:23:11:ad:8b:34:70:30:ae:cf:70:f9:
16:00:00:17:0c:95:67:16:d1:bd:10:a8:f7:7e:1a:
54:2d:5c:d5:a6:28:ad:72:87:1a:36:91:f6:60:c7:
75:cc:33:25:1b:ff:7e:a1:f1:60:10:20:8d:67:85:
3c:a5:09:2d:61:2a:6e:fc:37:58:9c:f2:20:a8:26:
cc:45:9c:07:1c:f7:af:cd:f2:80:e3:db:3c:21:dd:
2e:c4:1f:ea:a9:28:81:36:dd:42:db:82:ad:50:10:
39:a4:9a:3d:a7:07:10:84:ed:54:bf:96:ea:b1:21:
41:b5:bf:e6:61:4c:5f:d0:e4:4d:5f:f8:53:32:ad:
19:ca:69:ef:d8:07:00:94:f1:3e:c3:cd:dc:eb:16:
ff:ea:9e:a1:1a:05:b4:25:5c:04:49:98:81:7f:96:
29:3a:50:31:49:0a:90:85:88:43:47:f5:d5:69:5d:
95:11:91:fe:6f:af:bd:27:3a:ea:54:ac:92:26:66:
74:48:76:8f:69:27:c7:ef:d0:69:94:e8:8e:69:04:
99:ec:2a:90:9b:2e:ba:59:91:33:f0:29:b9:9d:be:
0a:63:20:93:9a:55:de:a4:18:0f:33:d0:78:d4:b8:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.96.0/22
IPv6:
2001:67c:2368::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29121
Signature Algorithm: sha256WithRSAEncryption
8d:a3:91:46:6b:da:0f:75:b3:de:56:26:d4:3a:2f:b5:f9:e0:
78:60:ef:18:c4:57:30:ff:a8:64:c2:37:b6:73:b2:dc:7a:3a:
3f:11:fb:20:c8:03:ab:3d:e3:39:63:19:91:4b:7c:e8:d0:c7:
d3:14:41:ce:be:d6:60:8a:a4:a2:32:e9:f5:52:5d:35:64:58:
ad:99:7f:0f:0d:e1:0b:4e:27:13:03:2b:34:84:5f:0b:0b:4d:
23:35:0d:26:d3:9e:da:7b:d5:31:15:ea:ec:2c:b1:ec:41:05:
9b:4d:12:20:95:78:c1:31:81:1d:8a:d3:93:4f:54:4d:f4:84:
1a:0a:a9:50:01:e9:f3:a1:31:9e:84:41:bf:16:5c:4b:9b:7d:
c3:9a:12:dd:84:d1:f0:73:3c:bf:e9:9c:b2:41:4c:c9:79:75:
99:b7:f4:96:af:87:f6:82:8d:03:73:3a:be:c9:12:f1:de:6d:
19:8c:75:48:d6:a2:b1:8e:ba:a5:43:d6:df:fb:24:58:88:c4:
3d:aa:e2:b2:5b:f1:10:a2:f5:eb:64:90:ed:3a:c2:fd:a7:a2:
c2:85:80:b0:4a:30:db:4f:11:a7:2b:28:53:29:f4:34:d1:3e:
ea:7e:e3:71:28:bc:d8:d2:30:80:61:6b:ac:5c:02:e5:bb:04:
f3:ac:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:45 2024 by rpki-client on console-ams.rpki-client.org