Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
File: uQMr2xKMhuALIcd5WagBHEDQZQw.cer (raw, json)
Hash identifier: IauQQZXR2SnfmzHmTwa9CcC752TvRRHEVNJiCji19vI=
Subject key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E2D9A8F05C63782BD32123A70FB6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211878
IP: 45.152.88.0/22
IP: 2a0f:5100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2d:9a:8f:05:c6:37:82:bd:32:12:3a:70:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:75:57:5b:e1:04:40:e9:58:fb:81:84:e2:
ad:59:c4:87:60:89:f0:1a:b9:89:a8:1c:46:0d:df:
c2:04:12:50:3d:49:c0:2f:84:d1:57:21:21:e9:5f:
45:bb:6b:5f:45:46:a7:a3:e4:2e:ad:ec:94:08:9f:
07:d9:7c:92:e9:f7:53:c2:61:7b:ed:d5:86:3d:07:
27:f3:c6:e0:b4:76:c3:d3:0c:a0:cf:43:64:18:d3:
01:60:b5:ec:bc:94:be:42:49:47:5c:53:3a:01:37:
fd:f2:fa:da:1c:f7:7d:a9:b0:75:37:a8:f2:a8:65:
cc:d4:76:c1:3e:80:5b:ec:f5:c0:55:bb:ee:7b:a0:
f3:6f:ff:db:28:3f:8e:09:8c:b0:be:75:66:35:31:
0f:27:93:83:84:84:26:dd:cf:e6:80:e1:e7:88:c5:
97:b6:bb:af:0b:75:ef:7c:6d:5c:eb:cd:b3:51:ac:
1b:96:92:ce:82:80:fd:b2:cf:0a:2a:82:4e:d9:9d:
9b:59:d1:39:2b:3c:30:88:2d:af:18:35:0b:af:b1:
55:c3:ee:dc:e1:17:f7:94:3b:be:b5:a1:aa:47:26:
07:d6:76:d1:8f:07:fa:e7:f5:3e:34:13:56:c6:84:
62:d5:c0:1b:b7:d4:c8:24:30:9a:cc:73:6d:a3:f0:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.88.0/22
IPv6:
2a0f:5100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211878
Signature Algorithm: sha256WithRSAEncryption
81:66:33:a0:b6:f1:2d:97:ea:72:77:df:3f:ee:47:97:32:01:
7d:f5:44:7a:50:68:9e:2c:47:af:ea:e8:aa:4b:39:88:85:c6:
e8:0f:f7:6c:b0:5e:f4:63:e1:3d:2c:d8:49:64:50:51:c7:e0:
22:b6:55:aa:3e:f4:71:e1:ef:67:0c:75:86:e1:49:3c:86:84:
53:f1:3f:88:fd:0f:b7:84:09:84:b4:bc:6a:91:57:3c:64:c1:
e0:09:0f:e9:c7:a1:bd:4d:62:fa:cc:8f:31:cb:04:c8:44:4c:
2f:17:04:39:ba:05:da:ac:dd:7f:be:ab:34:f7:f8:72:ca:5f:
60:2a:04:78:7b:0c:be:77:04:08:e9:ba:59:d4:d9:fd:24:4e:
84:00:57:92:d9:73:b5:40:f3:95:62:58:33:ab:c9:6e:96:67:
ca:65:c0:75:c1:79:e8:f8:82:f6:9d:2c:92:e1:ec:ba:ba:6b:
48:37:48:54:0c:33:43:7e:9b:da:35:93:0e:c8:8c:2a:9a:34:
fe:b0:f2:68:17:01:24:ee:20:f3:af:57:ab:f9:ff:35:54:f0:
bc:13:71:c8:c3:96:f9:3e:00:21:1d:59:5b:a1:6c:36:28:aa:
77:92:20:2e:e8:c8:bf:c2:82:50:8b:f3:aa:df:a7:77:50:04:
fd:8b:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:19 2024 by rpki-client on console-fra.rpki-client.org