Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
File: UEwHY-3Lox64nwmD3djdGIkYwu4.cer (raw, json)
Hash identifier: sQyRZXp0aAKHXt3CzuyD0WjR/a3LJV4rS7CytYadtHQ=
Subject key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF460E364943C9749833098A18E12D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199347
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:46:0e:36:49:43:c9:74:98:33:09:8a:18:e1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:e1:aa:7d:de:45:1d:26:b4:fe:15:74:4f:
3b:fd:a7:d5:36:cc:66:cd:5f:98:0c:46:30:ba:23:
46:95:28:e3:77:6f:82:bc:18:ac:2e:86:4d:56:1e:
2d:17:d1:0e:8a:5a:90:b8:0f:ea:bc:b3:3b:9a:2b:
75:33:23:17:7e:e5:61:05:17:4e:da:42:bb:b8:66:
bd:b8:18:50:53:6c:af:f1:e0:90:81:07:0a:f0:ef:
53:2b:82:e2:47:c7:1f:90:7e:9e:0d:30:a2:04:f2:
dd:95:a6:95:6b:3e:3d:4f:41:c4:44:d5:1f:20:df:
45:62:e5:63:f9:58:a4:f8:19:8f:b6:e8:52:ee:b5:
bb:57:f9:41:25:6f:2c:4e:73:9e:0b:7c:12:11:84:
a6:c0:b4:3d:97:fd:df:67:e2:ab:79:5c:c6:fc:81:
fc:85:06:d8:0f:5a:18:3f:07:cd:5d:9c:b6:63:9c:
7d:86:80:cb:17:e0:1e:0a:55:2f:0b:3d:9e:1f:7a:
8e:55:2a:8c:3c:5d:9f:90:4e:88:70:00:cf:63:ef:
e3:ac:7b:db:70:e6:9c:1d:cc:f2:a4:65:f6:90:7e:
4d:e5:d5:71:a4:cc:e6:ec:bf:b9:a6:d1:aa:f5:eb:
ba:82:2c:71:6f:6b:16:3b:df:20:e8:0a:81:a1:f9:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199347
Signature Algorithm: sha256WithRSAEncryption
28:fa:f1:34:2f:90:34:8a:35:21:d3:9b:d2:b2:41:57:aa:9e:
9a:80:ac:1a:75:21:c5:9f:74:3c:80:8e:e9:c5:fa:b6:cf:27:
27:6d:72:89:c6:0f:98:58:fa:2a:43:cd:1c:a7:70:cd:aa:5f:
04:94:78:2c:d2:29:d4:49:29:be:3a:44:02:5f:43:80:d0:19:
75:e5:fe:3c:72:8e:6d:ed:67:5c:e0:f4:2b:70:25:d3:92:5d:
8d:1a:c6:ce:d5:07:ae:c1:47:18:73:53:9e:aa:ec:5c:a1:d9:
48:88:92:7a:18:04:b3:b1:e8:a8:45:c6:19:57:df:06:d1:38:
a2:af:62:28:58:4b:ff:c6:01:99:71:1b:bb:78:40:db:94:e2:
44:3b:55:2e:d1:02:5a:04:49:fe:3c:ba:86:0d:65:74:ad:6b:
f2:7d:14:a0:57:d7:78:0b:da:82:dd:6d:74:c0:39:00:2e:b4:
5b:58:3b:89:8b:b6:97:84:7c:25:c0:e0:05:25:98:f6:a9:52:
0d:b7:50:ad:8a:8c:dc:8c:11:cb:eb:00:48:81:87:2c:3e:6c:
d2:4e:cf:22:73:51:3f:d8:2a:be:14:a9:5f:9c:6a:ab:ce:f4:
9e:f5:b8:91:55:f9:aa:94:30:3d:e2:70:6e:10:8f:95:8a:f7:
e5:0e:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:31 2024 by rpki-client on console-ams.rpki-client.org