Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
File: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer (raw, json)
Hash identifier: pAA6A+wdpMNb3WDsQ6Av4bpA20dj3QKLSwz259u5Gdo=
Subject key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF3DB253BE178BD873022C024250F03CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 07:54:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197837
IP: 94.154.56.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:db:25:3b:e1:78:bd:87:30:22:c0:24:25:0f:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 07:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:58:4f:7c:dc:be:60:88:c9:9b:c3:ca:70:
eb:5d:b7:9d:5e:ab:73:5f:de:ad:e0:24:72:fd:9b:
6f:86:8e:19:0e:2a:85:64:34:e9:79:24:95:7d:fc:
42:a9:77:36:e5:30:9a:a9:81:73:16:1e:f9:5f:cd:
4c:57:bc:5e:1e:2f:fb:3d:b6:fb:8b:48:f8:fe:4d:
d9:45:19:d8:4c:0c:04:7c:9d:18:ab:a1:66:d0:6c:
38:80:db:02:d0:e0:d8:1d:c2:86:9b:e3:cc:59:8f:
fc:c9:40:5c:43:95:d0:ba:2f:44:fb:bb:7c:4a:bb:
78:a9:46:ac:be:8b:a4:04:03:ea:7d:26:79:ce:69:
18:c4:16:b9:29:9e:9f:79:1a:4a:67:af:3c:ad:33:
5d:84:f2:ae:29:e0:98:35:a4:49:45:0d:8d:96:cc:
37:45:e5:98:4f:10:24:de:20:f8:f1:38:2b:82:05:
00:fe:10:06:9b:e6:43:b4:53:80:2e:49:72:13:b8:
ef:43:07:da:e9:0a:c2:4a:d6:cb:60:54:5e:55:25:
38:fb:65:40:df:9f:29:14:ea:05:f3:92:6b:a6:0a:
36:44:18:7b:f7:b9:56:11:77:14:f4:81:aa:48:d1:
b6:7f:ba:59:0a:85:56:74:77:11:71:88:dc:04:9c:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.56.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197837
Signature Algorithm: sha256WithRSAEncryption
47:c3:71:1e:17:57:6a:e0:09:dd:5f:10:e7:18:33:42:ff:76:
6d:ec:61:35:8f:4a:6b:41:7b:ba:3e:d8:5a:e5:b8:0c:59:4d:
d9:06:dd:5a:b6:3c:98:20:f8:73:bb:d0:37:47:62:02:b4:74:
c9:22:f9:32:53:18:36:fd:d4:35:81:35:f8:4c:3d:13:ff:30:
cf:ab:b0:45:c1:7f:c1:88:db:f1:51:a9:1b:26:cd:27:c8:c5:
5d:85:e2:c6:1d:06:dc:30:8d:8f:85:48:2d:25:4d:1f:f7:f6:
32:1a:e3:36:50:02:c2:d9:c7:b9:48:8e:89:ca:35:f0:5f:bc:
6e:77:6c:dc:03:6e:ca:42:35:ee:5e:7c:95:d8:38:fe:65:80:
29:6b:ed:1d:b5:0f:4a:b9:1c:8a:52:05:f0:94:84:b9:5e:78:
5d:43:04:0a:51:d0:aa:51:e2:1a:7d:f9:5d:9f:bb:20:fc:0a:
90:4f:88:e1:a3:ab:1a:3e:5f:3c:04:0d:d0:7c:60:3f:a9:c2:
b3:52:f9:d2:08:d6:08:e5:40:f6:b2:84:82:d9:1c:4b:5d:ad:
81:9b:86:d6:59:a4:36:eb:f3:cc:9a:ae:b8:c7:5f:c6:9a:a2:
da:1e:72:ae:6a:91:4c:aa:ee:df:c1:28:84:ab:7a:06:66:c4:
2c:81:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:23 2024 by rpki-client on console-fra.rpki-client.org