Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer (raw, json)
Hash identifier: +n98TNb9qYGXf+hCeby0fW1HJ/xs8TYUA+7qRkZS6ok=
Subject key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192E2BBB880F6FBCC5792F72FA7CB80B208
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Oct 2024 13:20:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212441
IP: 77.232.36.0 -- 77.232.43.255
IP: 91.142.76.0/22
IP: 185.173.36.0/22
IP: 193.163.175.0/24
IP: 2a10:9200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:bb:b8:80:f6:fb:cc:57:92:f7:2f:a7:cb:80:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 13:20:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9930359b5469112e6e2bfae8595b05485551d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:7c:11:6c:e2:80:49:4c:99:eb:97:2c:17:
10:ef:8c:f6:69:db:33:65:ba:f1:ad:05:df:4c:af:
70:bb:f5:22:a8:02:79:78:60:26:6c:cc:25:3c:0a:
34:06:6b:36:65:44:95:58:78:58:6a:60:4e:05:db:
d1:24:23:23:c1:16:9d:49:7c:b7:f5:96:9d:9b:ef:
2d:2e:c2:63:e6:dc:9d:48:5d:67:3b:b8:95:16:79:
22:21:e6:bf:49:80:0c:e3:d0:ee:53:c2:b0:be:9d:
f1:0f:20:fd:3b:31:71:69:e4:5b:f5:46:aa:86:ff:
6a:09:39:21:af:9a:ad:e8:18:20:86:ad:b4:32:be:
42:72:be:5f:8c:f2:55:0c:ab:14:f2:ec:90:8a:b2:
e9:ac:9d:1f:51:f6:12:c4:5e:88:81:ca:ce:25:cd:
a2:fb:ad:d9:21:f5:b7:bf:ce:c9:cb:6f:87:a6:d4:
67:c6:c7:53:65:04:78:49:e2:47:b7:3e:ee:34:a0:
53:8c:86:57:63:02:7c:bd:d1:a4:3a:22:5e:a0:fe:
e8:5f:b3:92:b8:b8:ac:17:fa:6d:b0:36:9c:4a:02:
5e:0a:3e:cf:60:3b:77:aa:dc:fc:ec:64:87:bf:28:
9b:47:cb:24:bf:fd:70:91:a6:1e:d6:86:a5:02:81:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.36.0-77.232.43.255
91.142.76.0/22
185.173.36.0/22
193.163.175.0/24
IPv6:
2a10:9200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212441
Signature Algorithm: sha256WithRSAEncryption
b0:b6:f7:ce:00:98:dc:e8:17:0f:5b:d9:e3:79:c3:6c:f7:22:
e8:71:b9:fb:19:a8:66:8d:98:c9:61:21:f3:d9:01:de:89:4a:
75:09:11:95:0a:a7:55:0f:bb:ef:9e:80:1d:b7:a3:e8:48:f6:
18:2b:3f:fe:df:58:95:8e:a9:4c:ee:72:49:1b:9e:6d:1c:54:
ca:d9:62:80:f3:44:14:dc:d3:e9:a2:d5:ab:f5:fb:7d:cb:ce:
73:25:d1:b6:4d:cd:46:c2:3f:4d:0e:7d:f8:e0:da:61:07:88:
9b:64:9c:d6:61:49:a1:de:95:03:8b:ca:d3:9f:42:43:69:85:
12:5c:d0:82:0b:9f:09:b9:b6:59:34:f2:77:bf:ad:09:f1:a1:
54:d2:04:f0:6f:93:8d:0c:16:88:cc:fd:a9:fa:58:7e:5a:02:
54:01:f3:5f:d8:8d:6d:01:a7:eb:45:60:8a:e8:08:6c:06:9b:
27:f8:a4:b3:87:0d:50:57:c7:01:8b:86:7f:84:f3:4d:2f:d0:
ff:00:65:86:e2:5f:48:ee:de:fd:b9:36:4e:6e:ba:f6:29:f9:
dd:ad:f8:a6:7b:eb:36:4f:94:93:63:14:e4:ef:98:09:68:ff:
59:50:f1:87:46:12:93:0b:9b:e6:9b:01:77:02:02:d2:ed:6d:
52:1d:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:12 2024 by rpki-client on console-fra.rpki-client.org