Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer (raw, json)
Hash identifier: e6fTRqcCMRnZHCPGPw/mMYu5mvhx9zVXjJWsRvnSEQU=
Subject key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E5C16C320B2633F61F52E28A16C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203687
IP: 185.167.140.0/22
IP: 2a0b:6e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e5:c1:6c:32:0b:26:33:f6:1f:52:e2:8a:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:9f:1f:fd:6e:f9:3e:c8:22:77:8c:d0:c9:
1b:22:84:1f:99:27:bd:31:ef:f9:3f:13:92:2c:32:
92:2b:8a:d9:65:b4:a5:42:22:d5:41:44:93:ea:eb:
28:07:53:18:c4:e4:91:c7:66:95:fd:85:83:c5:33:
c1:1f:6b:80:5c:b2:f4:e2:4c:ac:91:c6:e1:e5:c9:
c6:45:d8:71:f2:cc:b6:67:bb:0e:2d:21:00:5c:05:
ff:9c:af:fb:f1:15:78:bd:04:c5:f0:5e:2d:95:23:
74:9f:c7:7d:ad:a2:fc:bb:09:00:a4:7c:14:4e:f1:
4b:53:b4:94:7f:20:6c:c4:69:09:1c:95:aa:1a:d3:
24:2b:94:ce:81:2f:e2:8e:da:91:4b:04:14:48:b3:
eb:15:1b:ba:72:d7:be:65:93:33:f0:63:8e:55:10:
79:06:31:f4:66:fe:15:0d:58:e1:c3:db:3b:18:8e:
4b:47:20:61:e9:40:8b:87:01:40:c5:33:aa:41:c7:
e0:14:4e:15:1e:80:77:b7:91:29:9f:7d:0c:65:c7:
84:84:d4:42:d0:80:57:5e:81:67:fa:87:9c:fc:57:
b7:bd:4b:e8:c7:57:9e:e3:bd:a9:f5:8c:63:31:b9:
d0:de:ac:8f:49:8a:1a:48:99:21:51:ab:45:68:5e:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.140.0/22
IPv6:
2a0b:6e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203687
Signature Algorithm: sha256WithRSAEncryption
9e:d3:6a:46:ed:ca:84:8e:24:13:7a:c1:08:a8:60:8b:9e:87:
b1:4c:78:98:4f:7c:20:2c:41:de:18:9b:8e:13:ff:ee:2e:65:
9a:93:ba:26:c8:7a:81:70:14:1f:65:67:87:bf:be:42:d7:da:
ae:8c:1d:ec:fe:e4:ac:5b:d2:99:f6:24:ec:1b:d4:4b:8d:69:
5f:ab:2c:ab:f2:d5:3e:4a:3c:10:a8:4a:7e:10:d1:19:8b:b9:
81:50:6d:0f:31:8e:42:47:00:37:ff:83:a2:17:0f:76:6b:80:
db:2f:18:2c:14:26:4e:f5:1d:e3:37:ab:22:a1:a2:b1:c5:6e:
37:2b:8a:c5:8a:79:87:13:d8:d3:e0:c2:a3:c9:a4:fc:e0:94:
ef:a7:63:a5:92:eb:8e:cb:25:0d:8f:c8:f1:3b:c3:4b:b6:c0:
31:8d:77:5e:9c:01:f1:44:4a:51:bf:0e:d8:a7:16:66:7a:87:
74:c1:5f:79:23:70:dc:0f:de:a3:ea:51:d8:34:45:d2:bc:2c:
a8:48:16:e8:64:20:57:ce:40:ac:3b:e9:6a:59:29:eb:c4:c4:
73:20:d9:77:f0:05:cc:f8:10:9d:70:7b:58:c0:80:dc:53:7e:
06:31:ac:8f:5e:e2:54:22:99:4d:b4:94:37:3e:6c:7c:ae:f4:
15:95:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:48:36 2024 by rpki-client on console-fra.rpki-client.org