Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
File: uncwHhTWWzo9aG2qwW38SaxIx80.cer (raw, json)
Hash identifier: K4/+zkFsqVGGu/6d7xwELvuw3/4CmH0+1+Kt8H2dpKE=
Subject key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423690DDBB4ABB024B8E362B9A6390CB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211896
IP: 194.180.20.0/24
IP: 194.180.25.0/24
IP: 194.180.52.0/24
IP: 194.180.55.0/24
IP: 2a0f:b3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0d:db:b4:ab:b0:24:b8:e3:62:b9:a6:39:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:85:9f:f1:83:79:e9:e1:d6:dc:a7:78:f0:
e9:64:9e:95:5b:5b:ea:f1:99:66:ec:2e:18:37:e7:
4d:77:75:c5:f1:6b:7a:f8:b5:e6:62:d7:4a:2f:10:
d9:fc:59:fc:13:58:11:7e:d0:a7:58:f4:be:bf:5c:
0e:65:d7:21:0a:cf:f7:7e:0d:59:66:0b:67:99:8b:
f4:ec:53:c2:38:b5:0a:eb:d4:fd:30:01:2f:be:ac:
3d:72:9c:58:22:86:c0:90:07:94:ca:a0:b6:21:79:
cf:f5:e3:a6:dc:73:76:c1:c5:dc:31:b3:6d:de:e8:
1f:aa:bb:b0:fe:d4:14:da:63:37:a6:0d:87:31:07:
7e:8b:96:6f:00:b7:22:4e:9d:94:37:ff:0f:c2:35:
81:82:4f:aa:34:c1:4b:22:2e:8d:a1:c1:e2:6e:d4:
24:38:8e:5d:b9:37:11:d4:fc:8b:57:1e:8c:09:3e:
ba:32:f7:21:a2:7b:d8:c2:4e:a0:89:b4:f3:f5:f1:
3b:fa:43:02:40:3e:9c:fb:8e:c4:3f:5f:85:c5:70:
44:4f:0d:08:cb:44:b0:6a:0c:cb:3c:44:84:e2:ee:
2a:a9:cf:9f:69:37:9a:4c:14:d0:b2:ac:79:f9:81:
30:4d:01:97:ec:e4:a3:75:36:06:34:cb:b6:a6:bf:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.20.0/24
194.180.25.0/24
194.180.52.0/24
194.180.55.0/24
IPv6:
2a0f:b3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211896
Signature Algorithm: sha256WithRSAEncryption
1c:a7:96:af:a1:26:13:51:63:41:ca:f6:36:7d:b6:5b:fd:6c:
ae:ac:54:21:ae:04:40:cf:0b:10:12:f6:f6:b3:0f:05:5f:ef:
9d:75:4c:cb:f8:15:3b:c7:36:89:91:e4:61:2d:ce:1f:f1:7f:
71:74:73:3f:e3:5f:2a:d1:14:9b:63:4c:cf:cf:db:6f:5b:ec:
94:44:16:ca:68:81:e9:db:d1:ff:19:2b:6d:27:9c:77:d3:45:
f0:d4:9c:61:43:d0:e1:f8:26:bf:5a:86:63:b5:3f:16:f2:d2:
d6:e3:e0:17:eb:02:b0:62:68:bc:b9:07:a2:18:27:fd:d8:82:
2b:71:aa:c2:fa:82:76:3c:9c:22:86:b4:32:13:ab:90:da:bd:
f3:6e:50:fd:0b:be:a0:9c:e0:75:08:4d:a0:6c:ff:b6:82:6d:
ab:8e:3c:54:d8:06:61:6f:b2:4d:18:60:f0:8b:ed:bf:bd:ae:
5d:66:7b:80:eb:4d:3e:d9:f5:a1:af:75:3e:f0:d6:47:d4:42:
0d:47:f2:d1:e3:b4:1a:7b:f8:ed:1a:2a:45:a2:c6:2d:a2:ac:
d8:c2:c8:1b:4f:3a:4c:6e:ca:e7:3d:d0:26:b8:31:33:ec:ae:
81:38:54:d6:1b:f3:3e:11:5b:44:ce:07:ab:bb:4b:ad:22:a8:
07:34:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:18 2025 by rpki-client