Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.cer (raw, json)
Hash identifier: Umi49j0pJW67UbCZSpAX9Tp9hObO9IKtzaNXQdPMAcY=
Subject key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D588AF257C0AF4C00D9A60715E69A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203012
IP: 87.239.52.0/22
IP: 185.147.16.0/22
IP: 2a10:4e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:8a:f2:57:c0:af:4c:00:d9:a6:07:15:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:84:d2:cd:46:b1:b3:46:c4:d0:f9:5d:f1:
27:88:41:70:7a:5c:37:d4:ca:ec:b7:fe:5e:e3:c9:
d4:4f:93:e8:e7:c2:ae:0e:27:8a:2e:ad:77:b4:0a:
73:80:59:d2:2a:8a:26:73:51:9f:d1:f4:55:3d:a9:
55:e9:d1:fb:4e:ca:00:7c:c3:6e:69:66:76:ee:93:
0e:52:97:8e:a7:db:14:58:67:35:0f:15:a5:35:15:
7a:1e:84:cd:5f:1f:fc:3d:3c:0f:40:4f:01:82:9f:
79:71:4c:03:44:fe:22:d3:ab:bb:3b:83:e9:ed:8f:
46:8b:92:7b:42:ac:89:49:ce:39:dc:68:a0:6e:93:
b9:47:fc:cc:fc:5e:96:fc:0f:72:a3:86:fb:48:0a:
1d:b1:9d:23:52:8f:98:0b:eb:ca:47:7c:f1:48:b0:
f9:1b:23:ab:0f:d5:4d:6c:dc:87:66:4f:d0:93:c2:
b3:f3:29:8c:b4:d0:05:05:95:d3:69:6e:50:f1:95:
ee:65:66:74:09:23:b5:75:b0:0b:b0:be:e0:ad:34:
4e:f9:86:90:31:5d:b6:b3:76:ee:2d:2f:8b:ab:13:
ce:67:e4:12:d2:ed:15:98:5d:d1:37:22:3f:f5:d3:
70:d0:35:18:e8:de:ea:20:b4:32:2e:70:a0:1f:30:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.52.0/22
185.147.16.0/22
IPv6:
2a10:4e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203012
Signature Algorithm: sha256WithRSAEncryption
66:78:f5:02:c1:9a:ec:11:e4:4a:69:72:18:29:7e:b3:bd:a4:
bf:f6:73:c7:13:b8:31:76:c4:dc:a1:af:65:89:fd:bd:7d:f2:
65:5c:31:85:ab:ba:15:b9:4f:2a:c8:35:a9:36:1f:7f:81:60:
57:a7:e2:8d:09:2a:e6:8a:cf:43:a5:16:4c:ec:d3:4b:67:f3:
27:27:13:8b:30:bf:30:2b:52:4c:58:23:f5:58:ec:a5:69:18:
e4:4c:a4:6e:0b:50:e9:7b:83:c3:03:2d:01:eb:95:c2:c8:86:
0a:e8:7e:54:f3:c4:6d:6f:ce:c6:2a:b1:17:40:a2:9e:bf:44:
b4:a9:b9:f0:32:80:91:c9:66:10:fb:56:c4:52:07:ea:06:70:
76:b6:e3:6e:c2:7c:59:9a:c9:d8:e1:f2:94:00:13:0c:4e:16:
bc:81:fb:6b:98:0f:d5:18:6e:df:06:8e:ae:d8:45:3d:09:dc:
58:b2:ce:c7:d8:d6:73:a1:80:d4:ea:a1:9d:97:5b:bd:85:3e:
30:58:99:ea:62:e4:01:b7:64:81:8d:df:2b:5b:f9:41:0e:43:
3b:e5:40:8d:44:0d:5c:16:75:03:17:6e:30:31:bb:5b:6b:6c:
3b:51:89:34:29:29:34:4a:50:5b:88:59:2e:f9:21:15:94:20:
22:92:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:00 2024 by rpki-client on console-fra.rpki-client.org