Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer
File: UI4AePdxGuHP_QDzUsyKA7OXetc.cer (raw, json)
Hash identifier: 9QpGyNO6GXgOp4nP20kcusxQyj5rdASEZ7s8W+J+1F8=
Subject key identifier: 50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79555CDC5B1439295ABB9BD528A99BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5600
IP: 88.83.96.0/19
IP: 195.80.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:55:cd:c5:b1:43:92:95:ab:b9:bd:52:8a:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=508e0078f7711ae1cffd00f352cc8a03b3977ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:38:ae:c2:24:5b:b8:e0:42:91:bd:9f:e1:
af:e7:1e:2c:cf:7d:58:77:2d:11:cc:95:e4:6f:99:
24:8f:aa:a3:59:18:03:4e:c0:79:00:88:84:df:15:
85:d6:74:68:20:7f:55:16:c1:6e:b5:87:71:51:11:
a5:25:2e:16:b3:56:f8:52:71:8c:c5:2f:d5:25:b8:
c9:39:3a:9c:07:95:c3:56:25:0a:7c:dd:cf:6a:39:
a7:bf:a9:36:99:f5:a0:93:c9:ca:01:e3:13:ae:e2:
03:7e:9b:ce:e8:c3:bd:ee:8b:74:bf:a3:c5:a1:7a:
50:32:76:98:7c:cd:dd:f2:5b:88:7a:78:b4:f5:1a:
7e:d7:e0:b0:7c:26:46:0f:8d:31:5f:f0:a5:b2:7a:
78:ad:96:70:0c:19:a8:52:22:40:03:e0:d3:fb:6d:
15:33:3c:6e:dd:21:a1:b7:3e:0d:e1:83:df:18:8d:
c0:b9:07:ae:ab:01:01:79:83:b7:18:04:2e:31:8e:
b4:44:16:7c:8b:69:e0:b9:81:cd:e3:4e:2e:62:59:
3f:5d:c7:65:d1:89:6b:1c:d8:1d:a2:86:d0:5c:0a:
d6:fc:e6:5b:5e:d4:f8:41:49:e7:0b:31:c0:0d:39:
f3:50:2c:bc:8f:2b:4e:af:d1:36:44:a6:25:9f:16:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.83.96.0/19
195.80.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5600
Signature Algorithm: sha256WithRSAEncryption
2e:55:bd:cb:91:2c:86:4c:34:17:95:70:5b:9f:5b:cc:19:17:
8a:6b:31:99:48:06:4c:9d:0a:9e:78:4d:a6:a0:6a:33:0c:99:
64:d5:53:67:f3:16:60:82:43:12:1a:10:f2:c8:a4:89:28:cb:
09:37:ea:a6:09:17:70:36:1d:a8:8e:c9:dd:f9:f6:40:ee:72:
fc:6d:09:e9:cc:a3:ee:62:b3:ee:42:c1:72:27:90:f1:22:b4:
a4:80:e6:c0:93:10:dc:79:21:4d:29:0e:71:5b:62:42:13:a6:
c9:ba:ad:f9:4d:ed:dd:bb:6a:12:e1:8b:4a:63:05:e4:f2:cd:
32:0d:30:5c:7f:bc:4c:16:b1:73:2b:37:10:50:13:37:9f:7a:
5b:1c:a4:23:ff:18:45:69:72:17:fa:e3:0a:40:dd:1d:56:cd:
c1:a1:6a:1d:95:1b:c6:12:9d:9b:cb:04:4d:ac:e4:d5:77:08:
a7:d6:e4:b7:25:9b:9a:23:d2:57:60:2d:ac:a5:33:a6:28:51:
10:09:35:a7:bf:73:27:5c:df:d0:55:40:9a:84:dd:4f:93:c7:
f4:7c:18:97:65:20:0d:ff:5b:ac:ec:35:e8:d1:63:26:dc:95:
e5:45:d7:e9:b4:db:ab:f4:b5:84:be:eb:ff:76:12:c5:6a:d8:
e4:3d:7f:09
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzHlVXNxbFDkpWrub1Sipm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDhlMDA3OGY3NzExYWUxY2ZmZDAwZjM1MmNjOGEwM2IzOTc3YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9A4rsIkW7jgQpG9n+Gv5x4sz31Y
dy0RzJXkb5kkj6qjWRgDTsB5AIiE3xWF1nRoIH9VFsFutYdxURGlJS4Ws1b4UnGM
xS/VJbjJOTqcB5XDViUKfN3Pajmnv6k2mfWgk8nKAeMTruIDfpvO6MO97ot0v6PF
oXpQMnaYfM3d8luIeni09Rp+1+CwfCZGD40xX/Clsnp4rZZwDBmoUiJAA+DT+20V
Mzxu3SGhtz4N4YPfGI3AuQeuqwEBeYO3GAQuMY60RBZ8i2nguYHN404uYlk/Xcdl
0YlrHNgdoobQXArW/OZbXtT4QUnnCzHADTnzUCy8jytOr9E2RKYlnxbRJQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFFCOAHj3cRrhz/0A81LMigOzl3rXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2Y2MjBi
Mi1iZDdmLTQ5YTMtYWMwNi0yZGI2MDkzZGQ2MDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZjYyMGIy
LWJkN2YtNDlhMy1hYzA2LTJkYjYwOTNkZDYwNS8xL1VJNEFlUGR4R3VIUF9RRHpV
c3lLQTdPWGV0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQFWFNgAwQFw1AAMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAhXgMA0GCSqGSIb3DQEBCwUAA4IBAQAuVb3LkSyGTDQXlXBbn1vMGReK
azGZSAZMnQqeeE2moGozDJlk1VNn8xZggkMSGhDyyKSJKMsJN+qmCRdwNh2ojsnd
+fZA7nL8bQnpzKPuYrPuQsFyJ5DxIrSkgObAkxDceSFNKQ5xW2JCE6bJuq35Te3d
u2oS4YtKYwXk8s0yDTBcf7xMFrFzKzcQUBM3n3pbHKQj/xhFaXIX+uMKQN0dVs3B
oWodlRvGEp2bywRNrOTVdwin1uS3JZuaI9JXYC2spTOmKFEQCTWnv3MnXN/QVUCa
hN1Pk8f0fBiXZSAN/1us7DXo0WMm3JXlRdfptNur9LWEvuv/dhLFatjkPX8J
-----END CERTIFICATE-----
Generated at Fri May 3 01:46:33 2024 by rpki-client on console-ams.rpki-client.org