Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
File: UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer (raw, json)
Hash identifier: Qvit+uOHZ8GyqurTMAnREjaMQ9bKCS30kBFYTj5atiU=
Subject key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D91F50A6509A67AA636F86FE6C701
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:266c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:91:f5:0a:65:09:a6:7a:a6:36:f8:6f:e6:c7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:33:11:e1:2e:6d:af:8a:87:73:d3:41:a9:
ad:12:f1:9c:5f:9e:83:65:a3:0f:e2:63:9f:8f:e0:
44:7c:40:77:2d:bd:16:6a:33:88:ee:f3:43:a0:07:
d5:42:7b:5c:a7:09:9a:04:99:d0:6c:15:4a:68:1a:
f3:e6:c5:f6:a2:8f:2e:ae:ab:ab:48:98:bf:10:df:
ab:85:3f:f0:c4:e6:0f:19:b8:29:3d:b2:27:aa:bb:
a5:9f:3a:7b:bd:95:57:87:4b:8c:b8:d7:a3:96:79:
2a:93:55:44:a4:c6:52:5f:6f:22:4f:59:2e:82:0a:
ca:1f:ec:39:23:5e:7c:01:e5:aa:36:05:f2:42:45:
96:bd:86:73:3a:1d:50:9b:b9:88:7d:08:2c:51:14:
61:46:e4:6e:f4:93:10:08:e6:8c:08:38:36:03:aa:
22:bd:0a:d5:41:3f:bd:ae:17:9c:42:88:c1:a6:47:
a7:e9:37:fc:3c:ff:56:98:71:21:95:8b:33:c2:c5:
f5:9d:07:8c:df:94:e8:5a:6a:be:c2:7a:fb:07:8f:
ab:5e:12:8c:ab:3d:50:93:74:50:eb:b0:3b:fb:b6:
a3:ca:01:9b:f9:93:45:48:26:a3:d3:fb:7f:e2:7e:
0d:61:84:8d:08:6f:bd:8a:c1:93:75:ec:92:c8:d8:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:266c::/48
Signature Algorithm: sha256WithRSAEncryption
59:aa:c3:9c:8c:73:31:20:a2:8b:ec:d1:b2:93:3c:7f:4d:0d:
27:bd:19:49:61:1e:ed:1d:37:58:a1:0d:36:75:b2:73:b9:6a:
f8:fc:f9:05:7b:69:27:81:14:71:0c:fa:5d:0d:2d:90:b8:42:
24:48:1f:22:38:d5:d8:91:fe:c1:a1:20:d9:67:cb:a3:67:44:
99:46:5f:cd:ee:9a:a0:56:79:e3:d6:d7:3e:71:5d:3c:c8:39:
51:68:e0:c3:bd:96:23:f7:c7:3d:88:c5:ab:95:e3:52:24:d8:
89:10:7e:86:ec:62:7c:f9:9c:35:ee:09:d5:54:83:09:90:80:
e0:28:83:1d:c9:21:33:7f:57:9a:ff:3b:82:7e:a9:0c:55:24:
a2:ec:c2:66:c8:ca:dd:2a:54:45:ce:14:d5:fa:ec:94:e8:01:
82:05:9b:25:f1:eb:97:13:cf:ef:03:30:74:34:bc:0b:0e:30:
96:68:ab:a7:42:46:cd:6e:ea:03:c6:9b:eb:43:17:41:5c:1b:
56:1b:02:1a:7e:0c:c3:1c:e0:44:30:00:2f:04:21:82:69:e3:
bf:e3:4e:0a:35:62:61:1d:00:9f:bf:36:bc:b1:a3:0e:a0:b9:
d5:e9:8e:45:e2:ab:e1:20:cb:07:45:6d:84:eb:83:58:34:5b:
ca:d3:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:18 2025 by rpki-client