Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
File: UF4vLV5wk_-NQAOgK30-ExznChI.cer (raw, json)
Hash identifier: gL8CVO16A9DtidEUzMlFPWiiG0bP1CBEsGG5NI60OoM=
Subject key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAF887D5F788736974F885C7BB9CA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.255.240.0/22
IP: 2a02:2150::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f8:87:d5:f7:88:73:69:74:f8:85:c7:bb:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:66:05:b8:a6:54:1d:14:e6:a4:8b:a7:12:
ac:d2:16:3e:5c:aa:cc:98:6b:a6:f6:cc:cd:81:fd:
ba:44:95:1d:a9:f0:c1:68:6b:15:6a:1a:73:68:8c:
01:39:09:43:27:55:54:4c:3f:75:db:b9:c3:c9:8c:
24:62:d1:f5:90:35:71:ac:90:61:ad:48:1b:10:80:
bc:a9:46:e3:47:7e:05:d6:5f:b4:70:f1:bc:42:56:
0d:33:e8:ab:4e:02:41:20:76:6e:c4:81:ba:5e:90:
dc:cb:f8:1f:f8:df:24:27:7b:5d:35:3a:22:4e:d5:
19:90:99:de:ca:ac:1d:23:a5:f5:5f:b7:34:74:4f:
9a:d5:f2:63:b0:89:4a:17:ea:03:21:44:35:d3:46:
17:39:75:c2:6c:21:2f:90:99:97:ee:db:30:78:b7:
16:bf:c8:5e:f3:c5:b3:9a:85:89:62:e2:0e:9e:07:
f5:c8:ef:75:ed:dc:44:55:fe:54:d3:e0:e5:31:4d:
53:52:00:48:16:99:43:ed:59:d5:08:ac:55:09:a2:
c2:a1:c1:ea:22:9b:3a:c1:32:27:be:d9:fb:bd:0c:
24:9a:58:b4:12:76:92:a3:d2:62:2b:5c:f2:92:c3:
db:f8:28:5b:5b:65:61:60:60:82:77:f5:95:76:eb:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.240.0/22
IPv6:
2a02:2150::/32
Signature Algorithm: sha256WithRSAEncryption
0c:dd:fe:ac:7d:50:84:08:55:36:64:83:c9:cd:1d:e8:bf:26:
7e:13:cf:97:8b:fb:84:60:ef:2c:53:17:a3:ee:9a:78:0f:76:
94:4d:1a:29:a8:54:ee:01:27:c1:67:86:7b:00:94:63:64:55:
11:5f:b2:88:6f:1a:df:3b:12:32:d8:ca:3e:06:35:08:22:cb:
ac:92:68:e5:08:30:d0:d4:34:55:43:57:93:05:97:73:b2:a4:
0f:cf:c0:31:87:ab:1e:23:74:97:74:c6:b3:b5:10:5a:a2:ad:
05:1f:fe:6b:1c:a7:ef:91:56:06:a2:a4:c4:20:9e:3e:b6:3c:
de:b1:e0:ee:28:66:56:3e:9f:f2:b1:0d:5f:82:73:14:1f:f2:
8d:51:b3:88:d3:d9:e8:dd:cc:81:59:53:86:56:5f:85:fa:e0:
6e:af:06:31:2a:a4:8e:0e:3f:91:89:2c:af:a6:d4:13:cb:e4:
44:e8:af:55:13:2c:c2:91:ad:e3:a3:19:5f:2f:cf:4b:3e:d6:
e9:2d:eb:7d:56:e3:2d:d3:da:f6:d3:26:2e:37:66:35:69:c1:
46:65:c9:e2:8d:af:23:8a:b7:5d:bb:ba:6a:a8:5e:8e:3d:80:
19:dc:c4:b9:22:f8:ed:cf:9f:ca:cc:b8:24:c0:8b:04:35:dd:
16:69:62:53
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzC2viH1feIc2l0+IXHu5ynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDVlMmYyZDVlNzA5M2ZmOGQ0MDAzYTAyYjdkM2UxMzFjZTcwYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnpmBbimVB0U5qSLpxKs0hY+XKrM
mGum9szNgf26RJUdqfDBaGsVahpzaIwBOQlDJ1VUTD9127nDyYwkYtH1kDVxrJBh
rUgbEIC8qUbjR34F1l+0cPG8QlYNM+irTgJBIHZuxIG6XpDcy/gf+N8kJ3tdNToi
TtUZkJneyqwdI6X1X7c0dE+a1fJjsIlKF+oDIUQ100YXOXXCbCEvkJmX7tsweLcW
v8he88WzmoWJYuIOngf1yO917dxEVf5U0+DlMU1TUgBIFplD7VnVCKxVCaLCocHq
Ips6wTInvtn7vQwkmli0EnaSo9JiK1zyksPb+ChbW2VhYGCCd/WVdutWTQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFBeLy1ecJP/jUADoCt9PhMc5woSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzVhNzcz
MS1lZjU0LTQ1MDEtODZmNC05OGU5ZTI1MTBiYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNWE3NzMx
LWVmNTQtNDUwMS04NmY0LTk4ZTllMjUxMGJiNi8xL1VGNHZMVjV3a18tTlFBT2dL
MzAtRXh6bkNoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCsv/wMA0EAgACMAcDBQAqAiFQMA0GCSqGSIb3
DQEBCwUAA4IBAQAM3f6sfVCECFU2ZIPJzR3ovyZ+E8+Xi/uEYO8sUxej7pp4D3aU
TRopqFTuASfBZ4Z7AJRjZFURX7KIbxrfOxIy2Mo+BjUIIsuskmjlCDDQ1DRVQ1eT
BZdzsqQPz8Axh6seI3SXdMaztRBaoq0FH/5rHKfvkVYGoqTEIJ4+tjzeseDuKGZW
Pp/ysQ1fgnMUH/KNUbOI09no3cyBWVOGVl+F+uBurwYxKqSODj+RiSyvptQTy+RE
6K9VEyzCka3joxlfL89LPtbpLet9VuMt09r20yYuN2Y1acFGZcnija8jirddu7pq
qF6OPYAZ3MS5Ivjtz5/KzLgkwIsENd0WaWJT
-----END CERTIFICATE-----
Generated at Fri May 3 10:17:27 2024 by rpki-client on console-fra.rpki-client.org