Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer (raw, json)
Hash identifier: 40QzwRxxWcqER9fgc7BSQVL6OezHPZq5yCoZqetHLxk=
Subject key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC23E698CBBEB93D91365BB1A3B342
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60481
IP: 185.78.40.0/22
IP: 2001:67c:173c::/48
IP: 2a03:57e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:23:e6:98:cb:be:b9:3d:91:36:5b:b1:a3:b3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:0a:5d:ee:80:e9:e7:f7:1c:dd:0d:f1:2b:
47:fc:c0:6e:35:58:08:51:95:bb:bb:01:5b:d2:f9:
5b:02:ec:c6:f2:d0:29:44:1e:67:3a:65:1f:f1:93:
02:2a:e3:a0:7a:7b:1f:d3:f2:fa:d3:92:8a:d5:aa:
11:68:30:0c:04:17:b1:28:1a:d6:42:c7:3a:09:0e:
69:23:47:03:9d:08:88:52:52:de:cb:00:9e:f8:f1:
08:84:bb:1d:c2:6b:ed:05:95:d8:c3:cd:3d:56:15:
09:d1:23:ad:19:0b:e5:35:6c:5d:bc:89:9e:bc:48:
01:17:d1:f9:8a:d2:55:99:69:e1:12:82:a7:39:7b:
17:1a:db:77:95:52:f6:35:d4:9c:f8:2e:7b:53:ef:
81:9d:7b:65:50:a7:95:dd:6c:02:09:77:66:f6:1f:
ce:51:25:1c:09:9e:b2:d0:b1:9d:ba:b8:3d:7a:a9:
9a:74:62:b7:c1:af:d0:98:0e:ec:aa:d0:bf:44:56:
45:74:ee:37:27:fb:23:d0:64:c1:fc:f2:d8:bc:62:
2f:89:7e:04:4f:3f:35:6d:35:67:fc:07:e1:69:64:
56:f4:61:bb:38:58:c9:e6:89:f5:b1:44:71:66:a8:
a1:83:d3:a9:b8:12:df:58:95:08:8a:d3:b0:e5:83:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.40.0/22
IPv6:
2001:67c:173c::/48
2a03:57e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60481
Signature Algorithm: sha256WithRSAEncryption
5a:48:bc:6e:6c:cc:ad:a0:13:00:94:1c:c4:94:03:ec:ae:10:
76:71:b4:dc:a5:33:f8:7c:35:3e:65:d4:f9:e4:54:cc:b5:09:
b1:ad:0b:a5:89:07:98:d9:b8:30:06:e3:6c:fd:fb:ab:67:b2:
42:4a:7a:30:b5:27:b7:e7:38:0b:b6:21:12:8f:6c:22:c7:4a:
0b:13:a7:8e:ce:e2:eb:62:87:20:1f:2f:ff:38:0d:76:9f:60:
11:ea:f2:8f:67:d9:b4:1b:20:40:a1:27:8c:ab:d2:33:f5:75:
a1:f0:07:48:d2:6d:3f:93:e0:4a:ba:0e:be:64:3c:36:24:cf:
95:23:fc:68:92:db:7a:23:68:a2:3f:4f:2b:42:dd:20:fa:88:
b4:53:34:e1:b9:4d:03:1a:71:ab:43:35:6a:c3:00:de:76:6c:
36:29:a9:19:ec:44:48:1c:bf:96:28:f5:92:aa:35:ea:5b:e6:
a2:b9:99:37:b2:61:48:f8:95:24:8b:2f:2e:04:88:ee:a8:ba:
a4:50:a8:70:00:44:7f:95:db:f9:4b:cb:40:4b:b0:44:92:7b:
8e:54:70:cd:9d:5e:ce:a6:ea:6a:47:91:bb:bd:33:32:a3:33:
c1:7b:ea:71:2d:69:fa:74:6b:8c:59:d0:c6:0e:aa:e5:c8:19:
bb:b1:65:7c
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYzF3CPmmMu+uT2RNluxo7NCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGQxNDIyNzQ3M2U0Yjc1Yzg3NzI3NGNmNmMwNTBmMjVjNTc3MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0KXe6A6ef3HN0N8StH/MBuNVgI
UZW7uwFb0vlbAuzG8tApRB5nOmUf8ZMCKuOgensf0/L605KK1aoRaDAMBBexKBrW
Qsc6CQ5pI0cDnQiIUlLeywCe+PEIhLsdwmvtBZXYw809VhUJ0SOtGQvlNWxdvIme
vEgBF9H5itJVmWnhEoKnOXsXGtt3lVL2NdSc+C57U++BnXtlUKeV3WwCCXdm9h/O
USUcCZ6y0LGdurg9eqmadGK3wa/QmA7sqtC/RFZFdO43J/sj0GTB/PLYvGIviX4E
Tz81bTVn/AfhaWRW9GG7OFjJ5on1sURxZqihg9OpuBLfWJUIitOw5YN4rwIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFLjRQidHPkt1yHcnTPbAUPJcV3IfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2Q3NGI4
MC00MGVhLTRlMzQtYjUwZC0xMTRmYWNlMWE1NzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZDc0Yjgw
LTQwZWEtNGUzNC1iNTBkLTExNGZhY2UxYTU3MS8xL3VORkNKMGMtUzNYSWR5ZE05
c0JROGx4WGNoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAMBAIAATAGAwQCuU4oMBYEAgACMBADBwAgAQZ8FzwDBQAqA1fg
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsQTANBgkqhkiG9w0BAQsFAAOCAQEA
Wki8bmzMraATAJQcxJQD7K4QdnG03KUz+Hw1PmXU+eRUzLUJsa0LpYkHmNm4MAbj
bP37q2eyQkp6MLUnt+c4C7YhEo9sIsdKCxOnjs7i62KHIB8v/zgNdp9gEeryj2fZ
tBsgQKEnjKvSM/V1ofAHSNJtP5PgSroOvmQ8NiTPlSP8aJLbeiNooj9PK0LdIPqI
tFM04blNAxpxq0M1asMA3nZsNimpGexESBy/lij1kqo16lvmormZN7JhSPiVJIsv
LgSI7qi6pFCocABEf5Xb+UvLQEuwRJJ7jlRwzZ1ezqbqakeRu70zMqMzwXvqcS1p
+nRrjFnQxg6q5cgZu7FlfA==
-----END CERTIFICATE-----
Generated at Fri May 3 08:23:15 2024 by rpki-client on console-fra.rpki-client.org