Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
File: UFzWGp9t6drMDTySFwbffVCvvW8.cer (raw, json)
Hash identifier: iVOHVAY2QChpAR4ht04CsIrGIvMxKMSn8EiWy4D/IEM=
Subject key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FE3FDBFC008CCCC4B204B557F990C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.194.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e3:fd:bf:c0:08:cc:cc:4b:20:4b:55:7f:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:64:8c:39:33:1e:d1:9d:07:5c:b3:7a:95:
80:63:5f:72:45:12:eb:b0:79:18:f3:cd:7a:42:1b:
6b:65:09:a9:18:a6:a8:fc:7e:1e:39:dd:e1:49:d3:
76:99:d7:d5:c2:99:98:df:b5:99:71:04:01:c3:3f:
95:45:f3:87:82:ef:a5:e7:f6:db:5b:ee:3e:86:94:
18:03:c1:56:97:ad:e1:90:b0:19:29:10:31:bd:12:
08:16:64:9e:b3:5b:a6:da:ae:78:b2:a2:3f:c5:6e:
6f:4b:72:dc:5c:61:89:9f:d9:1e:70:14:74:c4:a3:
ed:c9:f4:87:a4:d2:11:1a:00:44:f2:48:47:c0:92:
fb:60:f3:3d:1e:67:a7:01:25:86:68:68:c0:b1:71:
4b:56:4e:6b:df:f2:f4:50:6a:f9:6a:77:f3:62:3b:
7d:35:98:4d:06:a3:65:b4:ed:66:59:6c:3a:d6:8b:
9a:7a:9a:46:f4:a5:77:19:51:27:e1:1f:14:2f:a4:
03:30:60:28:9d:3f:90:8b:81:68:92:4c:2a:96:51:
d0:5a:7c:10:ee:15:42:ba:b3:0a:82:2c:e4:47:bc:
98:b2:fa:1a:50:01:a2:c8:a7:e8:fa:63:20:95:fd:
c9:2a:a8:cc:a8:15:78:08:21:eb:71:f7:0f:9b:17:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0b:2d:60:e6:68:66:91:1e:55:67:b2:18:20:db:5a:9a:c1:
02:07:f6:3f:7e:e4:9e:92:93:7b:d7:09:fa:30:e4:02:e3:8c:
46:49:b0:53:63:ea:6c:32:ce:47:67:a9:da:2a:80:e8:4a:d3:
c7:3f:9f:f4:79:8f:e8:cc:25:12:27:69:66:af:96:41:9c:33:
b3:9d:c7:68:d2:5b:9c:01:72:5a:95:37:05:fe:71:bc:1f:9c:
6b:fb:89:ef:3a:6c:b8:3f:fa:ba:35:f5:44:ea:95:ca:ae:43:
dd:7d:3a:12:99:d6:c8:31:8b:d1:51:8f:c5:41:27:5e:a7:c3:
08:b6:bf:82:36:3f:06:36:c5:44:c8:0c:5d:a8:79:77:37:b8:
f0:da:e4:c6:2d:bf:2d:92:6e:9c:60:f9:7c:42:e7:0d:42:a6:
c2:06:dd:42:bb:d0:38:c0:75:22:46:5e:f8:2d:b9:0d:b4:ef:
97:9e:c8:d1:ab:8e:55:bd:d9:84:d0:30:cb:0f:c2:c0:bb:23:
66:dd:fc:92:25:c6:ad:a6:ef:8f:21:f1:70:08:a3:7d:1a:31:
c5:3a:f1:a4:48:ba:21:79:b0:95:9b:25:1a:05:c3:19:85:50:
47:3a:64:43:ec:ee:32:d4:8f:2e:3c:b4:1a:a9:11:38:27:52:
16:da:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:49:16 2024 by rpki-client on console-ams.rpki-client.org