Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
File: urc2dvq68SBW7bucedcVT-3gHyw.cer (raw, json)
Hash identifier: YC62Etj1qiYLFTUr/0xVtHfIOiPM7SyPLPZlKF4fvCI=
Subject key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC2BF1D8352F20AF36B7095DCABF1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47935
IP: 185.106.134.0/24
IP: 2a10:1680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2b:f1:d8:35:2f:20:af:36:b7:09:5d:ca:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:44:a8:03:ab:f1:c0:42:58:59:44:af:c5:
e5:1b:9d:65:3f:be:0e:79:94:41:37:ea:65:68:3f:
61:d1:57:87:4f:7f:b5:13:03:51:67:4b:6f:0c:2e:
31:c6:35:3b:20:df:a6:fa:7c:de:3e:b5:c4:b3:29:
9c:c0:38:ea:b8:3a:5d:65:b9:26:37:ee:2a:d0:d2:
6e:5e:62:9c:87:e6:07:d1:4f:22:d9:97:09:5b:62:
a9:9a:62:96:3f:e2:f5:e2:71:3f:1a:e0:15:a4:b0:
3d:6c:12:c0:6a:b2:5e:c5:bf:8a:3f:1c:31:b2:49:
65:e8:6e:d2:7b:6c:d0:01:56:82:b5:94:08:97:5b:
8a:19:d5:91:32:ce:1b:bc:30:e1:9e:7a:16:96:c2:
96:bc:c9:20:8a:2c:58:9a:80:a6:bd:33:ff:df:0b:
36:b7:1a:05:9b:b4:37:5d:f1:81:3f:9b:ab:22:e1:
e1:71:63:18:d1:ff:e8:f2:ec:29:ac:c3:14:85:f7:
63:cb:aa:a3:e7:88:4e:2d:c2:a4:4b:2f:68:9d:9b:
bb:70:72:3b:1b:63:b7:81:5a:76:c2:8e:ee:dc:7d:
14:1f:ad:6b:7f:ee:19:59:20:e3:44:42:00:1b:39:
48:c9:5b:a7:8b:ef:cd:6e:68:3e:b9:7c:d9:c8:65:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.134.0/24
IPv6:
2a10:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47935
Signature Algorithm: sha256WithRSAEncryption
85:cd:31:cc:6d:85:88:ba:18:7d:75:c2:8d:2a:e6:11:a0:5f:
fd:98:d8:38:38:c6:5e:49:7e:7a:3b:5d:37:8f:05:73:bb:3f:
9b:ee:e0:d0:6f:ee:91:de:cf:64:0f:b7:91:3c:38:0e:a0:da:
e9:f8:f6:6b:b6:6c:d8:7e:68:d7:8b:34:de:38:14:bb:fe:3a:
3f:60:fd:3c:62:75:5b:15:4a:6a:d3:fc:eb:7c:7a:ea:fe:c6:
74:01:f1:3b:24:6d:30:7a:a6:2b:46:e7:39:4c:5f:30:e7:8b:
c7:9c:c2:60:97:3f:78:85:d3:11:0b:5d:bb:1c:7d:35:75:89:
a2:65:e6:af:36:8a:68:dd:ce:c3:02:ac:3b:f0:8f:02:50:dd:
41:d9:ca:03:c6:9c:af:dc:ec:38:be:1c:4c:e0:0f:75:e2:6c:
b5:f5:92:fd:81:ec:3e:64:81:89:28:03:be:13:04:c4:d8:39:
7a:24:51:cf:1d:cd:73:0b:f8:d1:03:bb:dc:00:91:12:14:98:
1a:12:c2:1c:76:7a:74:48:d1:e6:68:65:54:b5:54:aa:8c:bd:
15:99:84:ae:ca:bd:92:cb:43:f4:0f:f4:73:dd:9b:de:e1:cf:
c7:c6:1c:54:75:d9:e9:7b:de:c8:94:a4:62:1e:11:9f:af:bc:
c5:99:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:48 2024 by rpki-client on console-ams.rpki-client.org