Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.cer (raw, json)
Hash identifier: 8l7FyDnq6cABoFS98k4pjCw6JZNlPfFfRajQXLZkd+g=
Subject key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794FDD13C7BE69E7ADC6FE7F19B3F89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44302
IP: 92.61.112.0/20
IP: 217.27.208.0/20
IP: 2a0d:3980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fd:d1:3c:7b:e6:9e:7a:dc:6f:e7:f1:9b:3f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:19:8c:e7:75:5c:98:8b:17:11:09:e7:87:
65:97:7e:46:5a:e1:72:38:2c:4a:b6:0f:96:9e:db:
8f:5e:65:d5:ff:11:3d:77:b7:06:9d:71:aa:72:6f:
9d:13:d6:93:d9:d3:9c:7d:f0:d2:3c:0d:cc:67:cb:
b6:73:76:61:fe:8a:01:88:cd:0f:78:ee:17:aa:cb:
88:37:4e:87:bf:e9:4f:cf:a5:7a:b4:8a:18:b7:56:
3c:37:f7:3b:98:36:b9:af:c2:7e:f3:bd:90:e4:78:
94:cd:73:4e:95:8e:68:d0:d3:9f:a9:33:7c:69:33:
15:c9:9d:28:0e:19:97:da:df:d7:86:07:16:8c:31:
2d:71:aa:36:09:bb:70:81:20:83:ca:c7:30:fb:ab:
93:48:9f:a2:fb:fa:d2:de:af:47:74:dc:b9:0c:57:
4d:c1:c5:4f:9b:91:b4:e8:cc:fa:d9:57:5d:fb:d0:
14:86:a7:02:03:4f:7b:d5:48:02:d3:a1:5c:93:79:
3b:62:60:f9:2c:15:68:74:96:13:cf:f0:85:f3:aa:
f4:ed:40:ab:08:c8:ed:99:54:eb:17:5e:09:6a:c6:
06:f9:bd:16:f6:70:26:c9:f3:f2:b4:75:0f:66:73:
61:0e:13:2f:a0:a3:d9:31:75:64:4c:c5:b1:eb:cf:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.112.0/20
217.27.208.0/20
IPv6:
2a0d:3980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44302
Signature Algorithm: sha256WithRSAEncryption
76:ff:63:29:63:9e:f4:de:58:86:d3:93:35:01:6b:d7:b6:0e:
e5:e5:9c:f0:45:3f:86:69:ba:57:4a:22:8b:b7:a7:ec:29:b0:
a4:7d:10:4b:c6:9f:85:b6:42:08:a0:9c:7d:2d:7d:bb:12:0d:
58:e2:4c:5b:96:89:bd:19:cc:0f:d8:81:cb:e0:e0:c6:b2:5c:
09:b0:2d:2a:a3:23:97:57:34:da:37:da:2c:af:38:14:66:6e:
4e:44:bd:dc:bb:19:e9:04:8d:49:d6:2f:8f:97:ed:de:a8:38:
2c:21:a8:cb:fd:d9:b9:a6:99:11:5c:80:04:78:c1:f5:32:99:
3a:b9:a4:83:d4:90:08:cb:9b:ba:4a:f1:f6:27:fd:f0:d0:fd:
be:b4:c7:98:5f:a3:62:9a:cc:68:36:d7:59:e8:dc:cc:cf:ac:
b3:85:56:44:c4:a5:d6:00:f2:92:18:96:bd:f3:bd:a8:dc:1f:
69:37:a0:b1:8d:77:54:8e:9e:14:ba:ad:2d:8c:2d:30:dc:03:
87:e4:44:03:13:28:92:9a:a9:cd:4d:29:e3:6d:4f:69:24:fd:
4f:ae:47:2b:21:31:ef:0f:a4:ab:48:48:31:16:1a:25:00:c3:
2d:5f:1f:9b:a3:d5:d7:63:32:c2:3c:8c:60:46:04:09:4b:51:
7f:52:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:06:21 2024 by rpki-client on console-fra.rpki-client.org