Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
File: uPrah6dvKfguJaMXnno4zwxrAwA.cer (raw, json)
Hash identifier: KUsqNjVULrzMplwP5q+nIeOgAtfQ7eP5Fn0DtntTz7Y=
Subject key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF14DAE40373F627AB8A677684F201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207271
IP: 192.145.60.0/22
IP: 2a10:a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:14:da:e4:03:73:f6:27:ab:8a:67:76:84:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:ea:7d:11:0c:86:13:44:36:01:05:04:37:
94:5d:82:49:9a:bc:ae:26:82:ea:cc:dd:9f:d3:aa:
85:06:f4:ce:06:c4:82:c0:bc:5c:7c:3c:a9:a9:73:
ac:82:0e:0f:77:ff:cc:15:5d:e0:94:08:4d:61:70:
b1:2b:5f:63:af:90:74:40:a7:74:31:e2:5d:26:2a:
66:9f:3b:37:0e:db:96:58:22:fd:c2:06:51:54:93:
5f:7c:6f:82:ff:42:77:fb:cb:42:6d:3b:91:23:d4:
a4:cc:15:81:96:7e:80:47:ac:d3:0d:12:73:46:bf:
82:3c:86:a1:b1:49:df:fe:7c:ca:db:8b:e3:56:4d:
45:bf:5d:93:24:51:21:c1:4c:7d:22:96:96:18:96:
42:7e:6d:04:be:05:c8:c3:32:69:37:26:7c:e6:54:
08:79:bc:d0:b0:f3:ba:40:f3:2c:2f:d1:d6:f7:74:
5b:57:f3:38:18:0e:49:f8:a2:30:0d:93:e6:24:22:
4f:e8:ac:99:50:a8:2e:5e:c6:59:06:17:cd:89:f5:
e8:c8:12:46:b9:3f:b8:83:31:68:8b:c1:e8:a0:d2:
72:6f:39:ea:aa:9f:e8:9e:9c:d3:02:b6:f0:85:00:
13:bf:0e:2f:02:4c:70:43:08:c6:23:d0:a9:99:f2:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.60.0/22
IPv6:
2a10:a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207271
Signature Algorithm: sha256WithRSAEncryption
96:52:99:82:b7:5f:5c:50:88:92:e9:1c:fe:a7:10:be:7e:e8:
63:7e:60:e6:ed:96:62:cb:3e:c5:bc:5b:4a:bf:0f:be:09:85:
45:e6:d7:d2:49:f8:a9:7b:36:a3:12:75:e8:2b:19:1f:17:c3:
56:55:c4:b5:38:2a:19:9a:14:ae:54:82:2d:a9:fd:f6:e4:0e:
92:72:0c:1b:7c:23:6a:60:0a:e5:fb:1e:bf:ae:42:a2:2a:36:
a0:5c:53:bf:86:1b:24:6a:63:23:a1:ec:f1:80:5c:75:d3:6b:
96:a7:f9:39:4d:38:65:23:cd:4d:ed:55:16:3c:5f:3b:b0:a8:
cf:f7:48:50:a4:6c:b7:39:56:4b:f7:da:1e:36:52:64:24:63:
fc:62:5c:c2:ad:64:9f:03:51:05:b2:32:56:99:87:0e:a4:80:
12:37:6b:32:10:59:15:81:15:4a:37:6b:0d:8c:48:08:e9:e0:
eb:33:12:0c:93:3f:55:63:39:c1:98:08:15:5d:0b:26:0b:bf:
4a:6d:4c:b2:6f:1e:11:90:e9:39:97:ce:62:84:92:88:c0:48:
60:12:3e:39:cf:61:05:e9:8d:68:17:ea:9f:3c:e3:a4:bb:65:
55:20:d1:4e:32:ab:8a:f5:65:ed:e5:1c:69:29:3c:99:f4:99:
0d:1c:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:48:22 2024 by rpki-client on console-fra.rpki-client.org