Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer
File: uGYR0dkPCoB7KUn3R01Bw2g4htw.cer (raw, json)
Hash identifier: Vm5PY3+0wDe9iIod3Wpfpekt5nurJ34RQF/oZ1QTdDs=
Subject key identifier: B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B790BFF0DE9115261D30439FC4DCFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200507
IP: 185.98.160.0/22
IP: 2a01:9200::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:90:bf:f0:de:91:15:26:1d:30:43:9f:c4:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b86611d1d90f0a807b2949f7474d41c3683886dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:da:9d:18:d3:8a:3c:3f:4d:32:aa:5d:e1:
2f:ec:a0:a3:73:f3:e4:ad:17:17:25:e6:dd:85:52:
28:98:07:1b:09:53:33:29:d4:cf:96:db:cf:79:de:
43:b1:ef:e2:d6:e4:da:66:a0:0a:5e:a0:cc:e4:22:
20:25:3f:25:a7:59:d8:b7:ee:6d:09:09:49:e5:e3:
99:a7:d0:51:94:58:b8:ce:9b:d1:49:8d:fa:4f:ba:
85:13:64:9f:f9:f5:ce:d3:f1:ac:45:b1:f5:95:01:
76:03:5f:6c:fb:cc:3f:4a:80:55:19:da:39:6b:11:
4b:ee:8f:a4:89:ff:e4:21:56:6d:79:06:c0:05:8a:
e3:5e:a3:a3:14:4f:e4:50:b4:d7:f1:af:64:57:30:
7d:f7:77:76:f7:e0:e4:ec:97:c9:8b:a1:cb:d2:6e:
82:a6:29:49:4f:8e:9e:91:b4:23:d6:40:31:a4:a6:
4f:ab:88:51:7c:76:ee:49:07:40:ef:38:fb:c0:40:
ea:3b:11:96:d5:ba:26:2e:b4:38:40:ab:ce:f4:3b:
a2:bc:69:a7:ce:f6:50:2d:81:82:78:c3:2b:ee:bd:
e9:c6:c1:04:1e:f2:75:bc:48:07:70:92:a6:e3:5c:
b8:be:58:2d:bd:5c:ef:cd:5e:44:61:b6:b6:fd:1e:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.160.0/22
IPv6:
2a01:9200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200507
Signature Algorithm: sha256WithRSAEncryption
6b:26:fc:08:dc:54:7a:94:0c:ee:5a:c6:04:74:9d:8c:d3:6d:
ba:b0:bf:a9:11:1a:09:b7:c6:88:74:13:1c:0d:6c:08:26:c3:
79:f5:66:97:22:17:40:1f:ae:3c:fd:4c:6d:4b:1c:ce:43:43:
22:3d:50:a8:bf:81:9d:66:ec:95:36:8f:8e:a1:e3:ff:48:36:
ed:48:6a:d7:49:17:7d:bf:2a:b4:2b:2e:49:fd:4b:07:74:0f:
73:4c:22:42:83:95:23:6c:f1:8c:cb:4f:cb:26:5c:3b:0c:9a:
a2:5c:27:6b:29:a0:7f:1b:3a:d8:f3:ad:9e:94:eb:70:fb:3b:
c8:56:a5:9d:36:06:03:f7:52:e6:f9:4f:b3:e7:7b:d0:ad:03:
24:2a:4d:e7:a6:46:83:4e:00:31:ed:60:e2:8f:08:d3:a6:ac:
4f:70:63:ab:cb:4d:b7:d6:1f:90:14:93:88:4f:e1:57:12:d5:
ca:bf:be:d0:98:b4:28:75:40:65:63:ff:5c:83:8d:c7:90:82:
6c:0f:67:04:f7:69:2e:2c:82:b4:28:28:11:5b:fc:1e:de:7d:
6c:b1:76:ad:30:6e:0f:5a:17:02:df:45:0b:26:03:ce:af:b6:
b9:d0:74:92:1d:e5:d8:ab:94:1a:7e:92:a1:7b:ff:7d:42:68:
29:d2:4e:aa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzGt5C/8N6RFSYdMEOfxNz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODY2MTFkMWQ5MGYwYTgwN2IyOTQ5Zjc0NzRkNDFjMzY4Mzg4NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW/anRjTijw/TTKqXeEv7KCjc/Pk
rRcXJebdhVIomAcbCVMzKdTPltvPed5Dse/i1uTaZqAKXqDM5CIgJT8lp1nYt+5t
CQlJ5eOZp9BRlFi4zpvRSY36T7qFE2Sf+fXO0/GsRbH1lQF2A19s+8w/SoBVGdo5
axFL7o+kif/kIVZteQbABYrjXqOjFE/kULTX8a9kVzB993d29+Dk7JfJi6HL0m6C
pilJT46ekbQj1kAxpKZPq4hRfHbuSQdA7zj7wEDqOxGW1bomLrQ4QKvO9DuivGmn
zvZQLYGCeMMr7r3pxsEEHvJ1vEgHcJKm41y4vlgtvVzvzV5EYba2/R5wIwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLhmEdHZDwqAeylJ90dNQcNoOIbcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzQyNjlk
Yy1lOGE1LTRhYTgtOTk3MS1lMzY4OTY2ZGQ4NWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNDI2OWRj
LWU4YTUtNGFhOC05OTcxLWUzNjg5NjZkZDg1Zi8xL3VHWVIwZGtQQ29CN0tVbjNS
MDFCdzJnNGh0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWKgMA0EAgACMAcDBQAqAZIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMPOzANBgkqhkiG9w0BAQsFAAOCAQEAayb8CNxUepQM
7lrGBHSdjNNturC/qREaCbfGiHQTHA1sCCbDefVmlyIXQB+uPP1MbUsczkNDIj1Q
qL+BnWbslTaPjqHj/0g27Uhq10kXfb8qtCsuSf1LB3QPc0wiQoOVI2zxjMtPyyZc
Owyaolwnaymgfxs62POtnpTrcPs7yFalnTYGA/dS5vlPs+d70K0DJCpN56ZGg04A
Me1g4o8I06asT3Bjq8tNt9YfkBSTiE/hVxLVyr++0Ji0KHVAZWP/XIONx5CCbA9n
BPdpLiyCtCgoEVv8Ht59bLF2rTBuD1oXAt9FCyYDzq+2udB0kh3l2KuUGn6SoXv/
fUJoKdJOqg==
-----END CERTIFICATE-----
Generated at Fri May 3 02:17:44 2024 by rpki-client on console-ams.rpki-client.org