Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
File: uIog4vueEVBGObZ8_sCv6z8wZpA.cer (raw, json)
Hash identifier: 2ffbzwIiwzbZTSoM8gs8Z1VOb655r/BJJ4AFZE88c5w=
Subject key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B730A6BB18BAE810FAF11DB3867BEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211857
IP: 185.236.84.0/22
IP: 2a0d:a500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:a6:bb:18:ba:e8:10:fa:f1:1d:b3:86:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:42:3f:4d:d7:fe:ee:33:ce:22:a0:8a:bd:
99:ab:79:a8:2f:d4:85:1c:38:e0:8e:49:32:0f:be:
f1:f3:a4:97:86:3b:cb:28:28:90:b7:57:79:dd:d2:
1c:7c:8e:32:6c:0e:9d:7b:8e:a1:15:45:1e:32:8f:
5b:8a:06:a4:39:f9:08:97:13:24:85:a9:ed:e3:05:
ec:67:5a:3d:89:73:8d:c0:a0:ce:d7:be:7b:f3:e9:
e9:b4:a0:91:7c:e0:f8:41:a3:82:6f:8c:d4:ec:cf:
4a:43:b6:bb:4e:04:fe:80:70:b7:79:66:77:d6:67:
39:a9:8c:da:a5:e4:83:08:65:1b:05:d1:a1:2e:0a:
ae:cd:0e:a9:cb:cc:95:8b:c9:95:5f:05:84:90:df:
08:37:7d:74:ae:15:63:f8:92:dd:cc:80:b7:bf:52:
d8:91:98:c6:e2:8b:c6:e9:4e:0b:a0:90:9c:1d:91:
2f:4d:53:e7:2d:a3:8d:bf:45:c3:d8:38:6b:13:d9:
10:09:d5:a5:34:80:99:cd:a7:90:52:94:64:86:97:
d0:dd:e8:4f:f9:a8:7c:80:f2:f2:8f:86:ea:1a:4b:
79:ff:a8:36:5f:83:db:47:f3:c3:ff:fc:18:2c:66:
ff:28:f2:3a:ba:f6:44:c0:98:a5:71:ba:c8:28:61:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.84.0/22
IPv6:
2a0d:a500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211857
Signature Algorithm: sha256WithRSAEncryption
4c:8a:b3:1e:ce:38:be:de:89:53:e6:11:17:1e:73:ff:3b:04:
7e:fc:f5:40:9a:64:e8:29:0e:bd:41:22:7c:3e:62:2e:a8:30:
1b:95:ad:fb:a8:c9:fa:f5:75:72:bb:f8:94:50:56:f2:11:fc:
64:b8:2d:95:fc:1b:07:4c:42:9b:44:1a:2f:ce:3b:2b:72:78:
0d:ab:61:6b:29:f5:8d:e3:ce:68:f3:d8:08:fb:2a:e1:92:77:
96:f7:eb:a6:a7:93:12:31:a6:11:84:55:91:22:ee:f6:e8:a3:
91:73:59:e4:09:72:99:49:da:60:11:dc:37:42:c1:5c:f0:20:
76:bb:c5:ef:dd:f3:10:74:f7:ae:18:bf:72:6e:75:27:17:ac:
89:09:fe:74:39:52:21:68:5f:23:0e:79:c3:4a:8e:b2:3e:ba:
76:15:e3:7f:e1:00:47:3d:1b:49:f0:65:e4:21:2c:7a:84:d3:
36:19:55:a2:8a:2d:5d:e3:4d:a9:14:3c:6a:bb:86:a9:e6:67:
e4:d1:34:62:93:65:5d:b7:6f:96:a5:b6:c2:89:68:6d:06:c9:
49:50:39:b2:3f:81:35:9d:5a:4b:c0:31:da:4b:24:1c:f7:67:
82:bb:a8:df:5e:87:97:2d:45:f5:28:1e:c5:f1:c1:72:e2:7f:
34:9d:72:02
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDtzCmuxi66BD68R2zhnvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODhhMjBlMmZiOWUxMTUwNDYzOWI2N2NmZWMwYWZlYjNmMzA2NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA105CP03X/u4zziKgir2Zq3moL9SF
HDjgjkkyD77x86SXhjvLKCiQt1d53dIcfI4ybA6de46hFUUeMo9bigakOfkIlxMk
hant4wXsZ1o9iXONwKDO17578+nptKCRfOD4QaOCb4zU7M9KQ7a7TgT+gHC3eWZ3
1mc5qYzapeSDCGUbBdGhLgquzQ6py8yVi8mVXwWEkN8IN310rhVj+JLdzIC3v1LY
kZjG4ovG6U4LoJCcHZEvTVPnLaONv0XD2DhrE9kQCdWlNICZzaeQUpRkhpfQ3ehP
+ah8gPLyj4bqGkt5/6g2X4PbR/PD//wYLGb/KPI6uvZEwJilcbrIKGFGSwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLiKIOL7nhFQRjm2fP7Ar+s/MGaQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2FiYjYy
ZS00Yjc1LTQ0YzMtOGZiMy0xOGNjYmM5OTViZjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvYWJiNjJl
LTRiNzUtNDRjMy04ZmIzLTE4Y2NiYzk5NWJmOC8xL3VJb2c0dnVlRVZCR09iWjhf
c0N2Nno4d1pwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuexUMA0EAgACMAcDBQMqDaUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7kTANBgkqhkiG9w0BAQsFAAOCAQEATIqzHs44vt6J
U+YRFx5z/zsEfvz1QJpk6CkOvUEifD5iLqgwG5Wt+6jJ+vV1crv4lFBW8hH8ZLgt
lfwbB0xCm0QaL847K3J4Dathayn1jePOaPPYCPsq4ZJ3lvfrpqeTEjGmEYRVkSLu
9uijkXNZ5AlymUnaYBHcN0LBXPAgdrvF793zEHT3rhi/cm51JxesiQn+dDlSIWhf
Iw55w0qOsj66dhXjf+EARz0bSfBl5CEseoTTNhlVoootXeNNqRQ8aruGqeZn5NE0
YpNlXbdvlqW2wolobQbJSVA5sj+BNZ1aS8Ax2kskHPdngruo316Hly1F9SgexfHB
cuJ/NJ1yAg==
-----END CERTIFICATE-----
Generated at Fri May 3 03:48:18 2024 by rpki-client on console-fra.rpki-client.org