Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
File: UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer (raw, json)
Hash identifier: OfmfX33ne31/vthYJP0ABCS9oOZxDjubek4puoQqFFw=
Subject key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E12CA9AAB07D61476CEB34F3CA922F195
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Mar 2024 08:04:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:266c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:ca:9a:ab:07:d6:14:76:ce:b3:4f:3c:a9:22:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 08:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:33:11:e1:2e:6d:af:8a:87:73:d3:41:a9:
ad:12:f1:9c:5f:9e:83:65:a3:0f:e2:63:9f:8f:e0:
44:7c:40:77:2d:bd:16:6a:33:88:ee:f3:43:a0:07:
d5:42:7b:5c:a7:09:9a:04:99:d0:6c:15:4a:68:1a:
f3:e6:c5:f6:a2:8f:2e:ae:ab:ab:48:98:bf:10:df:
ab:85:3f:f0:c4:e6:0f:19:b8:29:3d:b2:27:aa:bb:
a5:9f:3a:7b:bd:95:57:87:4b:8c:b8:d7:a3:96:79:
2a:93:55:44:a4:c6:52:5f:6f:22:4f:59:2e:82:0a:
ca:1f:ec:39:23:5e:7c:01:e5:aa:36:05:f2:42:45:
96:bd:86:73:3a:1d:50:9b:b9:88:7d:08:2c:51:14:
61:46:e4:6e:f4:93:10:08:e6:8c:08:38:36:03:aa:
22:bd:0a:d5:41:3f:bd:ae:17:9c:42:88:c1:a6:47:
a7:e9:37:fc:3c:ff:56:98:71:21:95:8b:33:c2:c5:
f5:9d:07:8c:df:94:e8:5a:6a:be:c2:7a:fb:07:8f:
ab:5e:12:8c:ab:3d:50:93:74:50:eb:b0:3b:fb:b6:
a3:ca:01:9b:f9:93:45:48:26:a3:d3:fb:7f:e2:7e:
0d:61:84:8d:08:6f:bd:8a:c1:93:75:ec:92:c8:d8:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:266c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:cc:c2:3c:64:e4:5a:bb:59:5a:f5:8b:3f:d1:8a:55:39:23:
33:9f:97:71:8e:fd:51:f4:37:fe:01:0d:66:93:71:e5:d5:b6:
0a:cd:cf:46:1f:97:6c:13:0a:5e:b7:53:62:19:25:6c:05:77:
b4:4a:ff:2f:cb:a0:87:7b:53:74:05:a1:c9:34:1f:e7:91:bd:
90:58:f8:f6:fd:78:e9:d9:dc:55:ee:e9:d7:a7:dc:1d:58:10:
bb:83:1c:06:b1:c1:81:35:d8:f8:34:53:68:76:01:3a:7d:e2:
1a:d7:82:91:a2:fe:35:d5:dd:4d:03:ce:81:b8:ca:06:ca:f7:
e3:65:0f:9a:a5:a4:44:95:d5:51:26:5c:a7:08:ad:22:4b:bb:
70:6b:4c:2c:58:9a:bf:4b:69:85:b1:f1:74:21:7b:5b:e1:85:
da:50:e3:30:21:70:fe:3e:6d:22:6e:eb:31:b1:01:87:dd:b4:
1b:7e:34:97:a1:0c:08:43:6c:83:c4:35:89:59:46:45:b8:e6:
6d:8b:c0:0a:23:93:63:51:21:bd:58:6a:44:e5:21:ce:6b:3d:
cc:31:b3:ff:10:fc:33:4d:44:fe:a4:24:b6:eb:fe:1e:0a:00:
cf:e6:63:92:c8:3d:f2:73:ef:a4:fa:3b:ac:23:50:52:79:94:
c9:2c:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:08 2024 by rpki-client on console-fra.rpki-client.org