Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
File: ucxtc0SS5BBmCKJPoble-qh5xFo.cer (raw, json)
Hash identifier: eaa/QDsHYJcIVQud74QV1UAy9d1Zt9ZdK1+bT962+JY=
Subject key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34892E99A70B34AA907614A5D7E04EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34288
IP: 46.234.32.0/19
IP: 81.94.112.0/20
IP: 85.158.24.0/21
IP: 109.233.176.0/21
IP: 2001:4b20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:e9:9a:70:b3:4a:a9:07:61:4a:5d:7e:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:0f:b0:87:11:e5:bc:90:13:c1:5a:43:fd:
55:9d:53:e3:5d:7a:2f:ff:aa:7c:c4:44:34:57:9a:
99:8c:e8:2b:04:45:ee:51:09:cb:97:86:b6:04:a0:
60:c1:7b:c4:b7:87:c9:81:b1:47:7b:f2:ac:4a:94:
76:a1:b3:0b:c4:05:14:1b:f3:19:63:9a:b2:08:32:
93:1a:49:30:c0:e8:74:cc:61:72:12:a6:15:19:a4:
c7:2c:f5:94:c3:b2:70:b9:df:2b:e4:8d:db:4d:c9:
df:64:94:fe:1b:1b:8d:31:1b:fd:c2:49:6c:f7:4b:
3a:94:bd:9b:ed:48:7b:de:f7:3b:4e:55:c3:a4:1e:
fb:12:82:d4:2f:d0:04:2c:d1:e5:76:3a:2f:d4:02:
9a:1a:2e:ba:4d:dc:23:c9:b9:a1:99:21:9f:6c:e6:
2c:ee:50:27:db:9f:a1:a5:d0:a9:06:fc:28:bc:05:
01:be:96:ea:3b:f3:82:97:26:65:cb:30:c3:c5:fb:
5d:01:f6:f0:4c:bd:8c:f3:c8:e2:8f:40:4c:db:75:
57:cc:e5:0c:c7:22:a4:f8:94:69:1e:bd:95:10:96:
57:cf:70:a6:7b:d9:a7:96:a3:dd:56:4f:34:a7:15:
29:4d:cd:c9:14:e4:95:b6:8a:8e:0a:47:62:1c:53:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.32.0/19
81.94.112.0/20
85.158.24.0/21
109.233.176.0/21
IPv6:
2001:4b20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34288
Signature Algorithm: sha256WithRSAEncryption
5a:27:26:6b:9b:f1:14:2a:41:38:19:78:88:7e:c0:cb:af:a4:
76:ab:6d:2d:3c:fb:78:88:2b:80:b7:4f:f7:de:35:2d:93:9a:
15:40:4f:61:ff:53:b0:4d:ee:48:81:d4:27:58:eb:6c:e8:a4:
a4:15:2c:a7:80:c7:98:08:d3:4c:47:51:26:d0:fd:45:64:97:
b4:41:31:2b:c8:04:f5:c5:82:a1:9a:4a:f6:ea:7f:d3:bc:c0:
ec:25:26:0c:f1:95:89:6d:c7:a9:14:e7:4b:f2:17:3f:36:33:
d7:e5:db:73:ca:00:c4:5e:1d:46:db:50:4e:09:cc:63:b3:8e:
a6:73:10:c9:fd:3f:d7:d0:ee:ee:a7:43:1f:d8:d7:7d:85:06:
1a:e7:8c:03:b8:8d:e6:bf:9d:1b:58:c8:a4:ea:9f:2d:ce:ee:
29:46:ed:8e:55:01:74:f8:02:b7:e0:c9:2e:c8:66:05:b4:dd:
c9:31:73:8d:16:69:e6:2d:8f:71:63:63:a0:b7:02:de:4b:75:
4c:f9:d0:25:47:a6:97:af:b6:98:4a:0b:78:ac:06:cf:1b:61:
30:6d:96:7d:34:5d:da:d7:c2:8b:de:3d:40:50:c4:95:b5:5a:
a6:9f:e9:2e:1d:15:59:0f:8b:62:9a:5b:2c:42:db:17:19:0b:
32:4f:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:26 2024 by rpki-client on console-ams.rpki-client.org