Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.cer (raw, json)
Hash identifier: AFW6WrA1CrcsxUqajgZZNMbfsIisPH6WI44flTh0NAw=
Subject key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC9818DD6420E76C0B37AB4548917
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49222
IP: 185.166.244.0/22
IP: 188.92.168.0/21
IP: 2a06:c240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c9:81:8d:d6:42:0e:76:c0:b3:7a:b4:54:89:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:e0:f1:af:e4:13:04:11:ac:5a:0b:37:47:
a8:cd:9b:94:f3:5a:b7:d6:3d:30:06:d6:9f:e2:83:
9a:3d:08:01:d7:dc:26:12:cb:63:6b:e3:2f:85:82:
ab:13:1b:8f:99:26:41:1d:fd:ee:e7:8b:48:c8:b4:
ee:eb:7e:d3:8b:80:7c:84:0a:6a:6c:71:d2:93:cb:
50:6d:ff:f8:15:fb:1b:49:82:47:33:4a:41:ec:fc:
12:cd:b9:45:5c:0a:ab:56:3c:2f:93:ed:67:6b:55:
cc:fd:a8:9d:92:1d:e2:61:60:95:4b:5c:d5:87:38:
e9:9f:a8:5c:c0:dc:2b:63:c5:d1:48:2a:25:54:d2:
54:ea:21:54:8a:66:91:61:d3:b7:54:7d:01:45:98:
a1:80:0e:1f:47:7f:52:05:71:bc:ab:50:65:08:bd:
5a:ff:f9:c9:69:b1:be:40:4e:ff:77:1f:9e:19:e6:
cd:da:5c:ab:e6:6f:d1:ba:5c:02:33:54:bb:b4:6b:
68:b8:7d:57:57:9b:de:ed:e3:ce:4e:de:c8:29:b4:
3c:8c:0c:ff:9c:6b:c1:59:e1:cc:49:f2:c5:ac:f3:
e0:50:d0:d8:e0:5e:56:16:78:6a:9a:aa:e9:f6:f5:
d1:c1:f5:e3:39:8c:72:7d:d8:dd:0b:ec:ea:94:a8:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.244.0/22
188.92.168.0/21
IPv6:
2a06:c240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49222
Signature Algorithm: sha256WithRSAEncryption
80:aa:0a:5d:df:78:ca:d4:cb:87:0f:e9:78:bc:6d:60:eb:b5:
7f:e1:a8:26:e4:e8:cc:b5:68:fb:62:9f:e2:93:65:f2:c7:c6:
76:1a:ca:18:61:94:46:ba:df:6c:c1:55:53:dc:5f:bb:c8:e7:
85:80:a2:b3:ae:16:24:b5:46:41:73:17:42:d4:f8:f9:21:6d:
75:f3:b7:9a:06:2f:ca:d0:1f:22:0c:a2:2f:ca:ba:f6:59:f2:
46:c6:55:06:69:13:05:2b:cf:40:1a:7f:9d:ed:be:cf:b1:96:
98:f6:cf:62:41:dd:3e:9a:6c:72:99:bf:e3:ef:b7:14:43:dc:
73:32:7b:83:4c:be:48:f6:43:fa:18:61:17:b5:76:e4:9b:57:
12:62:46:65:3e:df:94:66:5b:16:8d:dd:ce:f3:fa:02:01:4d:
a4:68:29:d0:0e:0d:0f:5b:5f:fa:4f:da:38:ad:1f:91:56:1f:
fe:a0:86:2a:ea:39:ee:d9:a9:61:13:ca:46:61:24:b1:8f:82:
0f:37:cc:b9:c7:b1:11:dc:d7:7f:79:84:86:c3:df:17:4f:a3:
94:56:17:cb:e3:8a:06:c5:a4:2c:42:67:cf:b5:1c:ef:ad:40:
55:1c:92:11:74:2f:ff:fd:9f:d3:65:17:fc:d9:82:d2:06:cf:
ff:50:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:13 2024 by rpki-client on console-fra.rpki-client.org