Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer (raw, json)
Hash identifier: 8oAPzWfDZElRyaquKmlVqsj/2n/bA2rGD9lmTaIhD88=
Subject key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4939984F4866907B46DFADDB10E7AE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39442
IP: 92.39.96.0/20
IP: 185.125.72.0/22
IP: 185.183.48.0/22
IP: 188.247.32.0/19
IP: 213.234.0.0/19
IP: 217.149.176.0/20
IP: 2a01:6aa0::/32
IP: 2a0b:580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:99:84:f4:86:69:07:b4:6d:fa:dd:b1:0e:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:49:ad:f8:88:26:99:6d:44:b6:6f:23:b7:
26:69:f8:ec:b4:55:ad:de:20:27:57:77:85:c4:5e:
39:ce:98:8e:1b:38:67:c6:7d:f1:93:e8:0b:47:0d:
d6:08:43:68:e1:6e:af:aa:56:e0:ca:fe:70:d6:c5:
66:82:a4:6b:e9:c5:87:4c:cb:2a:a3:40:2d:3e:a1:
84:4a:b4:c2:ee:c5:1a:6c:49:9c:c1:e1:11:ca:fb:
83:5b:2f:20:2c:64:d2:a6:6c:a8:38:07:1f:10:36:
06:0b:97:6e:6b:5e:8a:f5:0b:66:2d:61:4d:ac:02:
0b:5b:8b:ac:9c:f2:07:2e:5f:42:e6:70:de:af:3e:
2f:50:1c:ff:95:a2:59:10:9f:86:c4:33:95:e6:61:
f1:04:4c:ee:b5:fa:5b:a6:32:ef:6b:bb:59:f8:8c:
fa:b0:cc:73:47:50:00:b2:0d:97:0c:26:7c:c0:b0:
c4:87:86:c3:77:ce:88:4a:28:75:c1:40:7c:03:92:
b9:cc:c7:e3:0a:4f:bd:c0:66:5b:11:27:ff:a7:8c:
98:cc:3b:7c:0f:8a:b9:f7:db:b7:7b:da:09:8b:11:
b9:39:da:7d:2b:93:c4:e1:9c:d5:e1:a0:5d:f8:47:
e0:79:00:0b:c5:8b:82:27:ed:62:97:e4:a9:22:fc:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.96.0/20
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0/19
217.149.176.0/20
IPv6:
2a01:6aa0::/32
2a0b:580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39442
Signature Algorithm: sha256WithRSAEncryption
83:f1:c8:fa:04:06:cd:d5:f8:41:e6:28:69:ba:a8:a2:00:c1:
dc:86:33:e8:44:90:ad:51:11:34:d1:a6:07:b8:50:6e:6d:3b:
35:50:18:fa:08:9e:3c:4d:87:d3:5a:3d:a9:e3:2d:cd:95:36:
6a:8e:3c:82:50:f4:1b:ba:50:cf:48:d5:cd:a6:f9:f8:ba:46:
1d:91:98:5d:10:a3:93:cd:60:ca:1d:70:ce:fe:d0:87:18:37:
88:af:32:ec:78:69:88:d3:55:1f:9e:b0:4f:40:68:79:8f:a7:
50:87:92:a2:cf:80:ed:46:88:90:dc:71:8e:34:6c:95:81:ad:
9e:67:e6:ac:58:42:74:90:e8:be:0e:52:a7:12:1e:3e:52:f6:
d0:67:39:7b:96:a8:aa:45:f0:99:d3:05:e0:8a:9b:03:a4:e0:
be:0b:4d:63:0e:67:2b:62:ee:28:fc:02:34:a9:1e:2f:61:50:
af:d9:d1:e0:a9:0b:6b:d2:2d:91:77:28:9f:d2:1f:52:a9:33:
2f:15:05:80:f5:fe:1a:71:c2:f2:a1:e9:bf:04:58:2e:9f:e1:
18:11:0c:41:d4:af:9a:54:38:98:05:46:73:8a:4a:9d:13:d8:
6d:9e:ad:c5:fc:84:db:e6:99:78:60:70:6d:d9:06:25:38:1f:
b0:92:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:06:26 2024 by rpki-client on console-fra.rpki-client.org