Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
File: uRvis2eZBLYKL8OZt4CByGsDjZk.cer (raw, json)
Hash identifier: 8CGXmW2DqzLnNpvHBeMEgU5QTj5pllqJRDIll7xJmFI=
Subject key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726E7F5A62AC58632B0D95DC26CBA82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198492
IP: 83.229.56.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e7:f5:a6:2a:c5:86:32:b0:d9:5d:c2:6c:ba:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:78:53:be:5c:30:bd:3a:6b:71:f6:4e:f6:
ed:6b:43:e0:28:e9:cb:b7:53:50:f9:69:e0:e5:88:
80:8d:55:ca:a5:7d:db:12:5e:d2:c3:0a:ce:7d:1e:
46:b3:49:f9:27:6f:87:b6:8c:b7:f2:5c:f9:20:5d:
b3:bc:4e:73:ad:33:d9:0f:13:c0:2d:b3:ae:f7:f0:
12:c4:4d:04:79:2d:46:36:c5:2c:69:ef:ca:a5:37:
a6:5f:2b:ef:f8:a8:3b:2e:7a:b0:22:93:77:ae:06:
7b:f2:bc:74:b3:9c:da:68:e7:90:25:c5:a4:37:78:
75:1b:60:b5:77:01:25:f8:f1:0a:60:7c:a0:a4:87:
85:67:55:77:6f:95:e3:ff:88:14:2f:3a:07:ab:49:
81:d0:ea:40:1e:0b:50:32:a5:0e:8f:31:d2:21:55:
ff:a1:6c:88:05:f5:9e:b8:9e:c2:70:c7:a8:d8:b3:
14:48:89:54:7a:34:a4:1c:b3:95:81:a4:86:7d:48:
a6:6e:82:34:0c:a3:d6:6e:5a:f6:a6:e6:52:b8:03:
ce:53:e4:94:42:95:f6:8d:db:e8:74:42:cb:6a:94:
52:b7:0b:21:04:c0:ab:dc:69:0d:aa:da:ba:3c:30:
9e:0b:fc:3c:d4:de:9b:b2:22:e1:31:84:96:e9:5f:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.56.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198492
Signature Algorithm: sha256WithRSAEncryption
93:ef:df:1b:b9:45:81:9f:23:71:e0:01:3e:e8:af:f3:34:b8:
4c:21:8b:6c:da:4e:16:78:2b:a1:33:45:cb:cb:0e:37:07:11:
40:23:c5:70:b8:9c:09:f1:ce:f3:d8:5f:d9:2e:08:14:c9:33:
c9:d9:90:e6:9a:69:cb:c9:16:c8:5a:95:fd:ed:7c:ef:b2:cb:
b3:3c:3c:eb:4f:83:12:4c:1b:e1:f0:49:f1:d3:55:50:fc:35:
e9:0e:e7:13:64:b7:6c:ed:95:90:42:88:df:fd:23:d1:68:37:
94:8f:8e:28:10:1b:0e:11:e1:72:eb:ea:70:ba:2c:66:20:e8:
45:fc:d5:02:7e:83:c3:dd:36:1d:d1:1f:49:16:f8:0c:43:62:
e5:ac:ee:76:29:35:ce:a5:1f:ea:ae:99:5d:75:30:f4:97:21:
0e:7f:85:a8:4f:53:c3:67:2a:0b:ce:df:9d:22:48:13:a1:94:
a3:43:27:d4:24:8e:a7:ba:bf:48:5d:d7:7a:30:c7:cd:b1:bb:
e4:41:5f:8c:a6:e1:03:36:46:37:8e:32:87:38:10:e5:6d:dc:
1a:41:28:c1:67:82:16:68:1c:4b:c8:67:ed:9c:26:4a:cd:61:
cb:92:c1:31:22:5d:a1:c3:c8:09:68:9c:5e:e4:e3:ae:16:ff:
dd:36:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:48:25 2024 by rpki-client on console-fra.rpki-client.org