Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
File: ukxoXvpqLBBFY38CejJcCux5wBU.cer (raw, json)
Hash identifier: jbl6cmNY8flZgIlRsCozoLm1w4CCF5n86csD3Nu/8kM=
Subject key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3C2668D7489F112A875C893A0FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12557
IP: 185.117.180.0/22
IP: 2a03:52a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3c:26:68:d7:48:9f:11:2a:87:5c:89:3a:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:26:41:dd:54:b8:e3:2a:37:6e:f3:eb:84:
80:3b:b0:cc:1f:6b:ec:12:37:8f:98:fd:c6:ce:31:
6b:56:cf:6a:ec:d7:71:7c:2b:14:a2:77:b5:20:ef:
d2:3d:be:63:a2:98:b4:57:0f:c1:f6:ec:c3:09:74:
30:40:7a:bc:97:0b:06:3b:fd:f2:69:7a:dc:35:68:
ee:37:00:b7:d3:72:79:2d:2c:19:b1:85:42:0c:85:
33:6e:34:05:00:47:80:d8:5e:46:b1:c4:23:34:68:
e0:2d:7b:18:d4:c9:1e:d2:5c:52:e3:26:74:b7:98:
49:b2:4b:ac:f3:1b:d0:0e:c9:07:fb:2a:bb:b9:2e:
4c:df:ad:dc:eb:de:d0:cb:9b:ed:0a:73:95:27:3f:
e4:3a:91:4f:14:1f:34:56:71:85:77:06:29:25:10:
63:50:c3:8a:15:87:96:f5:ee:f7:a6:a9:7c:32:f4:
ef:97:0b:d5:52:2b:db:f0:db:1a:5c:33:ce:be:5b:
18:b9:0d:e9:7d:39:4f:8a:40:6d:91:c7:b0:94:ca:
a3:f4:3a:4f:c3:3d:47:38:21:11:f8:0f:e8:b2:a6:
27:b9:98:d8:b2:94:f0:dc:46:39:c5:55:95:df:46:
77:63:f7:fa:76:6a:15:21:5a:58:da:06:3e:28:d3:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.180.0/22
IPv6:
2a03:52a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12557
Signature Algorithm: sha256WithRSAEncryption
18:cb:64:03:90:5f:07:b7:33:89:cb:4c:b7:4c:a1:93:e4:c4:
bc:23:03:9d:6d:aa:d0:bc:d5:f5:66:23:b9:c5:63:50:ff:48:
ec:f9:db:f3:62:5e:fc:ad:f0:92:39:0b:37:70:50:3e:bd:8f:
d2:a9:64:e5:eb:c8:86:5b:82:97:14:1e:17:d2:31:6b:fa:e2:
6b:db:cd:2d:61:d6:02:09:44:83:11:d6:12:db:4f:6e:23:4b:
5b:70:54:2b:15:b6:8b:2f:bc:f8:30:12:52:bf:0f:a2:84:25:
84:1c:c1:fb:e5:fe:b9:2f:7f:aa:df:4c:78:45:a1:74:94:b8:
e7:79:4f:d0:39:fb:48:c0:a6:ec:d0:e7:96:21:0e:6b:5b:ae:
b7:df:e8:17:49:38:f7:bf:b7:98:fc:86:21:e8:53:40:49:ae:
35:df:04:5c:2b:4a:d6:d9:b6:4c:a0:20:0f:73:a6:32:d4:75:
00:60:79:ca:38:6e:e5:fe:6a:7c:f0:1d:30:22:87:a1:e4:d2:
20:bb:56:13:0a:14:71:56:eb:e9:f4:d8:39:ac:4c:ed:50:4c:
43:6a:0e:2c:e9:b8:f6:99:31:70:c0:8b:eb:61:95:9b:ce:c5:
10:62:b6:65:93:93:43:94:8b:36:e0:fb:96:c1:f2:0a:73:0b:
5d:ff:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:43 2024 by rpki-client on console-ams.rpki-client.org