Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer (raw, json)
Hash identifier: w1ZgQB89IcpUtsEOJ6TLoZK++aYwwBipUhppHRro2Aw=
Subject key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E8070C3EF752032DAD652AE229903BA35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Mar 2024 15:04:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213243
IP: 185.170.208.0/22
IP: 2a0a:68c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:70:c3:ef:75:20:32:da:d6:52:ae:22:99:03:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 15:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafed139df0fad6fde0d82869144104d204b92b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:70:a5:fc:64:a1:f0:f0:fd:6a:cc:43:ab:
34:d5:1f:ec:a0:cb:5d:de:8d:1c:ab:b6:26:a0:1c:
74:bd:85:fe:38:d4:c5:0b:76:05:b3:cf:97:43:23:
99:3b:ab:a7:f8:2b:23:57:9b:fb:a1:4b:d2:8f:b5:
fa:18:da:b0:18:f1:1d:01:58:b4:b3:64:93:13:e2:
d1:4a:b8:77:78:2c:33:1a:a9:b8:98:0f:0d:24:2c:
c4:a9:17:45:c0:1c:e6:49:e3:e6:2b:2d:fb:25:79:
14:1a:dd:41:0d:b7:6d:1a:60:9c:45:e2:cb:9f:90:
77:1b:9c:b7:30:ef:4c:be:a7:ca:fe:27:23:3b:64:
c8:e2:40:d1:a7:50:33:d5:3a:07:4f:48:92:3f:4b:
df:61:b6:1f:df:a9:a6:b6:21:29:f9:80:19:65:c9:
f1:e2:72:4b:89:7b:0a:27:52:99:e5:f0:44:fa:1b:
8c:9e:8c:e9:32:eb:a7:bd:94:8c:b8:c5:a6:33:8f:
c4:d3:a6:62:3a:41:8a:c5:39:67:40:49:14:45:10:
8b:73:c5:7a:5e:b8:27:60:d0:f9:e9:85:81:e8:9f:
80:e6:5f:db:b0:82:5e:ad:fa:1e:70:2e:eb:dd:12:
3b:d3:a2:2c:9c:6f:f2:fd:63:c0:f1:7b:48:9f:15:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.208.0/22
IPv6:
2a0a:68c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213243
Signature Algorithm: sha256WithRSAEncryption
0f:dd:63:17:03:b9:c1:a6:a7:87:c9:ff:4f:07:37:64:56:af:
24:7f:8f:1e:fc:9c:08:cc:f3:1c:98:f1:5b:46:00:d4:79:de:
37:95:d2:e8:18:c8:cc:3a:08:90:88:89:f5:68:07:7c:1f:e0:
ad:61:ec:58:a5:2d:13:7a:0b:a1:4b:c5:ec:29:7d:1c:03:0d:
d0:4a:7e:7b:11:76:e9:bf:43:83:88:98:2f:9e:20:05:54:30:
07:31:cc:ff:f5:bd:44:30:e9:90:9f:be:73:9f:86:b7:65:1f:
d5:68:23:14:a5:a3:b0:93:12:f0:ce:41:9e:6f:62:b3:b6:6a:
96:6c:f1:0d:6c:cc:01:be:69:3a:28:3c:33:05:f8:ca:da:1b:
e7:bb:e9:47:fb:dc:bc:1c:c9:54:d6:79:40:e5:99:05:51:27:
9c:6d:b7:d4:07:32:8d:9b:1b:80:2e:36:50:35:84:4b:f5:4e:
7b:ea:12:89:cf:f4:27:e7:28:f6:fd:67:da:ec:08:2d:13:62:
0a:34:54:db:05:a0:9c:ab:3f:e7:dc:43:8d:8f:e8:ac:79:2d:
bd:3e:1d:c8:b6:1a:1a:4d:9f:c4:6f:a4:e5:b2:e1:6a:c1:24:
82:91:33:60:dd:21:35:a0:21:22:3c:71:7d:dc:e3:e3:74:e2:
1a:2a:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:40:49 2024 by rpki-client on console-ams.rpki-client.org