Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
File: uQ9AvbnmZHaekXWQ942253GT11E.cer (raw, json)
Hash identifier: 42YtNO7XR7ooDwgYUiIE4QX3aVlLZYY3uZ1abph4Pzs=
Subject key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF5E0C42666402F12F95994C3ECBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204851
IP: 185.237.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f5:e0:c4:26:66:40:2f:12:f9:59:94:c3:ec:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b90f40bdb9e664769e917590f78db6e77193d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:b0:c0:bf:e2:0c:17:5b:af:69:bc:87:d0:
dc:d5:fc:05:70:52:7a:b4:ab:c4:a5:26:4b:a6:09:
1c:3f:21:d3:86:8a:72:b8:a5:97:83:b1:70:f1:37:
b0:61:dd:93:35:c8:bf:14:1e:2f:81:f0:38:64:b7:
e9:df:d7:63:f9:ac:a6:a4:4a:2d:b9:eb:53:fa:de:
0c:a2:94:70:c2:3c:e8:4f:67:6a:ab:f7:26:79:4d:
2f:2d:a8:5e:8b:11:a8:0c:6b:d1:47:a9:3a:41:9d:
09:6b:cb:ce:77:35:ea:53:fc:92:28:a7:49:a8:fd:
0b:86:c5:1e:04:3b:41:cf:30:8f:46:4d:53:e9:16:
34:47:31:88:fe:d0:8e:e8:7b:86:78:7d:6f:c5:fb:
4a:31:b4:6b:16:e5:be:b0:b0:18:c1:e5:85:96:28:
22:53:65:bd:25:08:ee:b7:d0:c0:87:a3:78:1e:f1:
05:e0:25:90:c9:2c:4a:23:96:c1:5f:af:d0:c1:90:
e6:72:fe:b4:a1:c6:60:71:3e:c3:13:41:26:b8:d9:
1d:64:06:5b:70:59:c7:e8:84:8a:e4:91:73:06:23:
e3:83:78:45:de:b2:ba:e5:a7:64:1a:4e:80:4a:bb:
57:fc:56:c7:fb:c2:bb:28:e5:35:4d:70:b0:be:55:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204851
Signature Algorithm: sha256WithRSAEncryption
33:7c:2f:1c:22:c2:34:4d:02:3b:d4:13:ba:75:a8:5c:4a:8a:
26:30:77:b3:3a:57:69:ac:5c:58:c4:9f:d2:c6:18:f5:bb:74:
9b:a6:17:26:78:0c:d3:e3:b2:f9:3f:28:8b:d5:ca:1c:03:5e:
c4:26:f2:3c:52:00:0e:4f:89:9d:c0:a0:05:d6:1a:9d:90:a5:
ab:2e:a1:59:e2:9e:32:12:bb:eb:fd:8d:06:3e:a5:87:a1:3b:
d8:3c:4c:e3:f1:35:8c:ee:61:27:a9:03:2f:b7:11:b6:af:68:
1a:15:e4:6e:f0:a2:3a:37:c6:99:3f:5e:cb:d2:97:b4:ff:71:
80:d2:82:32:46:f4:1f:e4:f8:d8:3e:e4:c3:2d:20:93:27:5a:
02:ce:89:92:d2:46:ae:5d:56:cd:7c:b8:5b:a7:24:25:65:dd:
2b:e4:46:15:24:94:bb:25:35:e9:b9:a2:17:90:cd:71:63:61:
9b:3e:11:1f:78:bd:0b:4d:ff:f4:05:12:88:13:69:78:b4:99:
7a:2d:36:7a:34:c4:36:2e:e0:b5:80:eb:9a:5a:3b:40:a6:58:
56:16:af:fa:00:d1:16:68:ca:f3:cb:48:86:eb:fd:26:d2:94:
b2:c2:a3:2b:3e:39:4a:7a:93:05:44:e7:bf:69:3e:06:fd:ac:
87:0b:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:29 2024 by rpki-client on console-ams.rpki-client.org