Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer (raw, json)
Hash identifier: 8x61ZlZ2eOW+CljHpoZhxzplmgOhj/kduzBc4BzYCno=
Subject key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB37C92C27966E8DA857E26D96D259
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203630
IP: 185.130.148.0/22
IP: 2a0b:cb80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:37:c9:2c:27:96:6e:8d:a8:57:e2:6d:96:d2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:e2:05:5c:9d:6c:e4:76:59:5b:ca:77:ba:
2d:7d:b8:06:9a:b7:15:1b:00:41:40:e8:11:85:a4:
8f:0e:76:66:f8:a6:6b:42:75:e5:5b:1a:5a:d9:4a:
2a:86:4b:1d:fa:0b:4f:56:c9:47:49:ff:45:a2:9a:
e2:a8:33:8a:9b:68:ad:f6:7c:88:ea:3d:c2:66:e2:
d2:f6:74:e3:22:85:a3:a7:99:35:e0:12:0a:4c:dd:
80:3d:5f:ea:95:ca:e9:76:e3:a6:bc:02:b3:45:ad:
ec:06:d5:9d:5f:32:b4:09:51:9f:b2:a1:ad:31:34:
11:f0:45:d8:ff:d9:8b:8b:00:5c:4e:d1:ea:dd:4c:
53:cb:ae:a1:56:0d:93:19:70:d3:cb:99:07:22:9f:
ce:bf:3f:ac:09:7d:f3:1c:2f:87:7c:5c:be:34:c2:
68:b2:dd:07:52:88:86:62:d2:5b:98:40:15:9b:18:
ac:c1:48:be:24:42:a9:5a:1d:8a:cb:cf:99:ba:48:
7e:59:09:8b:da:09:87:6b:a0:dc:0c:f2:b3:29:26:
df:ca:61:6d:70:ae:da:e5:bb:b2:d4:1b:90:d6:9c:
d3:dc:46:b2:92:0d:05:4a:b0:d9:1d:f5:64:40:74:
d8:4d:cd:f1:dd:76:03:d4:5c:a1:2b:fa:48:f5:cb:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.148.0/22
IPv6:
2a0b:cb80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203630
Signature Algorithm: sha256WithRSAEncryption
4f:06:64:3e:ea:31:9d:87:ed:db:7d:a1:4d:74:34:4c:26:01:
a6:14:44:61:b2:98:0e:88:33:d3:a9:7c:ea:ec:8f:36:e3:f7:
2b:e2:8b:0b:83:d1:9f:37:98:2d:a0:66:5a:67:db:d3:af:65:
b8:35:a0:85:50:c6:92:31:df:27:8b:51:2f:8d:35:92:82:3b:
b5:4d:b1:36:42:ae:30:5c:28:bd:95:90:14:47:ea:07:35:b9:
5c:46:2a:02:99:b8:81:75:86:1f:68:b7:36:af:ec:c2:ee:51:
a7:cd:82:ea:b2:10:09:4b:ed:55:a7:04:7f:44:ed:66:a7:6d:
29:69:27:bc:a6:c8:7a:bf:51:cf:45:cb:cf:01:7b:f0:8b:3b:
ec:89:d4:fd:2a:a4:88:99:87:28:18:18:1f:50:8e:2b:3e:a5:
84:c8:a4:db:05:fe:19:24:6c:3e:da:6a:f8:27:21:04:a3:5a:
7b:ec:bf:bb:b0:1f:71:46:c0:8a:ac:b7:8c:14:76:a6:06:76:
ca:4c:4c:0c:93:f0:4e:82:a1:b3:2c:52:22:3e:71:b5:27:4d:
e7:00:04:5b:9d:dc:89:d2:c6:4d:7b:7e:8c:1a:cd:b1:82:03:
5d:11:61:d7:85:5e:8c:fe:13:09:a5:99:e4:72:b8:79:c2:6c:
88:64:40:8f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJuzfJLCeWbo2oV+JtltJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGM4ZjIzZDBjNDhjNjJlMThlMjhmNTYwY2M5MTU5ODkzZDRlNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfDiBVydbOR2WVvKd7otfbgGmrcV
GwBBQOgRhaSPDnZm+KZrQnXlWxpa2Uoqhksd+gtPVslHSf9FopriqDOKm2it9nyI
6j3CZuLS9nTjIoWjp5k14BIKTN2APV/qlcrpduOmvAKzRa3sBtWdXzK0CVGfsqGt
MTQR8EXY/9mLiwBcTtHq3UxTy66hVg2TGXDTy5kHIp/Ovz+sCX3zHC+HfFy+NMJo
st0HUoiGYtJbmEAVmxiswUi+JEKpWh2Ky8+Zukh+WQmL2gmHa6DcDPKzKSbfymFt
cK7a5buy1BuQ1pzT3Eaykg0FSrDZHfVkQHTYTc3x3XYD1FyhK/pI9cvOZwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLjI8j0MSMYuGOKPVgzJFZiT1OQvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2U0MjVk
ZS0yMzZlLTRhMzQtYjQxYS00MjQ4MWE2MjEyM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvZTQyNWRl
LTIzNmUtNGEzNC1iNDFhLTQyNDgxYTYyMTIzYy8xL3VNanlQUXhJeGk0WTRvOVdE
TWtWbUpQVTVDOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYKUMA0EAgACMAcDBQMqC8uAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbbjANBgkqhkiG9w0BAQsFAAOCAQEATwZkPuoxnYft
232hTXQ0TCYBphREYbKYDogz06l86uyPNuP3K+KLC4PRnzeYLaBmWmfb069luDWg
hVDGkjHfJ4tRL401koI7tU2xNkKuMFwovZWQFEfqBzW5XEYqApm4gXWGH2i3Nq/s
wu5Rp82C6rIQCUvtVacEf0TtZqdtKWknvKbIer9Rz0XLzwF78Is77InU/SqkiJmH
KBgYH1COKz6lhMik2wX+GSRsPtpq+CchBKNae+y/u7AfcUbAiqy3jBR2pgZ2ykxM
DJPwToKhsyxSIj5xtSdN5wAEW53cidLGTXt+jBrNsYIDXRFh14VejP4TCaWZ5HK4
ecJsiGRAjw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:03:55 2024 by rpki-client on console-fra.rpki-client.org