Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer (raw, json)
Hash identifier: 27dRTRh68xzhgtnZ3YZF6GdYk5AE/C9FthtR7GPDzIk=
Subject key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01916F2DA51C67AE90277A76990A3A0F9A98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Aug 2024 09:45:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210036
IP: 193.36.104.0/22
IP: 2a0d:d740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:2d:a5:1c:67:ae:90:27:7a:76:99:0a:3a:0f:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 09:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:7a:f2:fd:0d:ea:37:be:80:81:b0:39:46:
6e:92:15:3c:45:aa:fb:0d:36:e5:10:80:84:73:76:
92:51:56:07:a4:66:63:5f:91:a1:57:49:da:2c:4f:
31:ad:fb:e4:e8:7d:fd:14:dc:74:69:5b:38:33:81:
45:a4:24:18:3f:75:fd:85:1e:c0:d6:fc:4f:df:70:
f4:f2:18:18:33:f8:7e:e1:9b:63:3b:a9:ac:0b:60:
4c:67:d4:00:81:ef:c6:7c:f2:4c:3d:34:cc:f3:77:
29:8e:03:f3:fb:b0:47:7c:4f:18:e4:da:aa:db:78:
ec:ef:da:35:80:7b:fa:d1:85:08:13:48:e1:d7:81:
c5:f4:99:36:ba:62:50:fa:80:30:2c:3a:49:7c:c6:
7f:77:c8:b9:32:30:99:6b:78:98:03:0c:22:17:ec:
d3:5f:fd:6b:0b:67:d0:d1:e2:74:22:e3:72:3f:06:
0a:72:f4:0d:f8:04:96:3c:26:b9:14:fb:4a:87:57:
dc:5e:db:21:2f:99:d5:5e:4d:6f:19:64:23:25:7f:
4c:2c:6e:f6:50:59:83:a3:0e:0a:9b:67:f3:81:8a:
f2:e9:25:ee:3f:ea:bc:fa:75:60:6e:8b:c0:74:e7:
44:cf:bb:a8:b1:2c:d0:66:48:b8:4d:71:ae:bf:0a:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.104.0/22
IPv6:
2a0d:d740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210036
Signature Algorithm: sha256WithRSAEncryption
5a:a5:7e:f3:a4:84:89:40:4c:2a:21:4c:0a:54:30:58:39:05:
69:34:cc:9c:4d:3c:ee:81:60:10:a3:2e:8b:dd:29:55:f4:65:
41:19:3a:f8:97:44:16:51:3b:32:19:60:bb:24:e3:b4:e4:95:
a3:86:26:3c:a1:c0:7f:33:0c:2a:52:2a:3e:c9:1c:e1:15:19:
66:33:bf:bf:5f:d9:a9:a8:1b:9e:79:d7:77:95:47:03:75:84:
05:15:e8:70:53:cd:b6:a7:47:bc:43:99:7d:25:e7:f3:fa:68:
7f:ec:e3:b3:01:0b:22:10:bb:f6:64:c0:11:4e:9f:78:c5:08:
20:d3:bf:6e:c3:e5:cb:d5:fa:99:3e:61:ea:54:61:ed:9d:4b:
0d:ae:7d:e6:b8:c4:29:89:bb:b5:28:6c:e1:8c:f5:95:c7:f1:
4f:d3:76:ab:23:9e:d9:9c:4a:2c:24:a1:45:1d:3a:78:69:ea:
cb:20:fc:a0:99:95:fc:d9:e4:5f:9d:4b:bc:9f:33:14:69:50:
b8:34:0d:60:cc:48:4e:24:97:3d:3b:7d:c2:de:d5:51:a0:92:
d6:42:60:93:63:1f:cc:f3:2f:9f:ef:0e:bd:51:47:dd:34:b3:
96:17:4c:4c:3d:9d:e0:3c:60:10:4b:b0:3d:1a:c7:71:02:d9:
e0:0b:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:51:28 2024 by rpki-client on console-ams.rpki-client.org