Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer (raw, json)
Hash identifier: IP1ZY8gHw/ABv4wciiUJA5tqfI8HLGbtRLios5drSa4=
Subject key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8E9D9785AAC8774EFA90A420CFCFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51275
IP: 89.107.248.0/21
IP: 109.232.200.0/21
IP: 193.23.138.0/23
IP: 2a00:1608::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e9:d9:78:5a:ac:87:74:ef:a9:0a:42:0c:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:f5:dd:5b:26:44:18:d9:90:4c:9a:fb:be:
b8:ee:db:b1:24:24:83:56:93:99:e7:08:0f:ff:37:
62:c1:d0:49:1f:c0:94:90:2f:e1:e9:f0:46:be:bc:
8c:2a:e7:dd:bb:b8:ff:99:52:8f:16:74:8c:2d:e5:
2d:42:bd:7c:52:a0:7b:89:1a:2c:f9:db:5c:86:dd:
3c:88:e1:da:63:83:d6:86:69:b7:48:3f:db:91:ac:
fe:9f:4f:fd:61:16:82:d3:98:da:7b:eb:77:c6:ea:
58:00:05:e4:59:64:f0:b3:2c:7b:9d:73:dc:92:ff:
da:68:3c:1b:c2:5a:8b:ad:02:42:33:5e:78:2d:86:
65:f4:e2:85:80:5e:2c:68:44:52:32:cf:16:50:5a:
5b:48:24:7e:98:3f:ca:9c:a1:85:01:75:67:c9:21:
e0:41:e8:79:cf:0c:3d:75:bb:90:5f:03:3b:1b:b4:
10:98:53:3d:fc:93:60:e2:b8:b2:de:c2:d6:c9:5c:
6c:94:1d:a5:a8:2f:7a:93:6d:b5:46:7e:8f:e2:72:
ec:dd:d2:1f:cb:d5:17:ab:ce:42:7e:a1:4e:ad:1a:
e1:2a:6c:42:b3:02:6e:ca:28:be:f0:55:ec:11:25:
db:a0:26:f2:bb:32:38:10:8e:b8:c4:97:de:92:72:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.248.0/21
109.232.200.0/21
193.23.138.0/23
IPv6:
2a00:1608::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51275
Signature Algorithm: sha256WithRSAEncryption
a3:a6:5a:38:d9:4f:28:0e:8b:c9:ee:29:24:c1:f3:74:f5:48:
bd:a6:32:64:f6:fa:5a:8c:5c:b1:84:35:73:c6:cc:53:b1:ae:
43:65:26:63:f9:3f:8f:f5:bc:2f:09:06:24:39:b9:fa:a1:a9:
f9:63:7d:cf:d2:29:a3:6c:77:b5:26:ee:54:12:24:04:40:ed:
d1:62:c7:33:8e:cf:54:27:20:2d:33:33:10:df:fb:ad:8a:13:
3f:54:a5:87:ab:8e:32:a0:df:d4:b1:8f:e4:e8:3b:bb:22:cb:
27:f6:60:47:ee:16:25:f5:de:e0:f5:0d:93:56:1e:bb:ef:4a:
65:09:6c:6e:4f:0c:8f:f6:ba:01:a8:08:f7:a1:c3:b7:fe:5a:
f3:ec:61:8f:7d:f2:5d:da:02:73:8d:30:fd:a1:14:30:2e:1d:
89:3a:cf:68:2e:17:81:10:ef:84:b7:0a:62:76:93:4d:dd:70:
53:c3:2a:a4:8d:8b:bf:09:e8:2c:55:76:f3:c1:86:e5:fd:ba:
af:91:ed:bd:e2:83:1e:1a:ab:41:23:af:a7:1c:e2:4e:66:42:
ac:31:e7:38:aa:7f:33:69:c3:56:49:62:9c:33:db:68:b7:36:
d9:dd:69:3e:c4:0d:21:76:56:fb:b8:02:b7:c4:a4:e8:7e:5c:
d9:94:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:57 2024 by rpki-client on console-ams.rpki-client.org