Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJKqDg2tUDywaBdnSNbSG-ylISM.cer
File: UJKqDg2tUDywaBdnSNbSG-ylISM.cer (raw, json)
Hash identifier: IFmnkKh0+ZE4Y1SXpzSMhTCAdZVoFhj8tF2uODRLFII=
Subject key identifier: 50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E37F90CBA1FBE347D65EEA3FDCCD7E9BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Mar 2024 13:20:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215364
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:f9:0c:ba:1f:be:34:7d:65:ee:a3:fd:cc:d7:e9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 13:20:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5092aa0e0dad503cb068176748d6d21beca52123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:bd:2a:fa:f3:a2:3d:eb:23:ed:41:d9:9d:
e2:94:89:aa:8d:b4:dc:07:94:10:06:ae:c8:a7:c7:
21:57:76:55:e2:40:05:c5:78:b5:fe:41:00:f6:2a:
59:da:e7:50:79:d3:03:50:79:2d:97:0a:b4:94:1c:
77:31:82:29:b2:6b:94:d7:a0:65:ef:c9:17:3c:d7:
86:c1:c2:a1:7a:f9:a9:f7:ae:ab:f9:2c:6e:8d:79:
7d:a4:4c:2b:30:ab:7f:0c:b5:12:09:16:2b:5a:87:
62:1e:c2:c6:37:cb:b6:8b:f1:cb:d5:d3:87:9d:a9:
57:d2:70:1c:2a:4a:f9:5a:b6:ce:58:68:23:93:2d:
4d:6c:aa:fb:87:a4:fb:5c:6a:66:3b:92:bc:8c:9a:
64:fc:db:fc:14:b5:f3:96:a2:31:ac:25:71:1f:b4:
31:d0:ee:f4:6a:7e:ee:53:4e:ec:2e:87:f4:2e:01:
6c:b7:15:38:75:14:8b:3b:58:ee:a4:aa:2b:dc:54:
f2:60:16:8b:75:ca:c1:b0:0f:a4:ff:4a:a2:38:44:
dd:54:af:0e:62:88:52:d7:ca:9f:58:80:96:1b:5a:
c4:2a:84:42:46:a4:9d:b4:9f:fb:cf:19:4e:c1:cf:
f6:73:a4:37:e7:08:f0:a3:3a:aa:ec:41:69:d4:7c:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215364
Signature Algorithm: sha256WithRSAEncryption
34:9a:a0:cf:d4:dc:39:44:a5:9f:55:54:0b:80:dc:0a:22:78:
2d:00:59:5c:af:d7:75:bc:87:e0:6b:16:70:40:be:5f:bd:fd:
25:03:60:32:92:7e:13:e4:d0:d7:b3:0a:3e:76:87:ce:96:44:
83:4e:45:06:b5:8f:03:8d:02:c3:cd:42:ab:37:bd:61:fa:22:
28:5d:27:6f:39:f0:cd:c0:20:ca:ed:44:91:b2:6a:65:83:78:
eb:cf:b2:06:e5:ca:57:6a:86:06:a4:fe:98:8e:dd:b7:45:38:
19:28:98:98:db:de:ac:24:87:fa:e5:7f:20:af:4b:88:23:6c:
d4:75:03:97:ba:71:3e:a0:6b:c7:f4:77:e7:7c:3a:8a:c8:94:
5e:48:9c:21:0f:1e:e0:e5:cc:8e:7c:2c:b1:98:c4:d3:56:d7:
62:10:73:75:c1:5b:7a:e3:65:27:74:74:a1:1b:49:2c:3f:c7:
4b:f5:a3:e9:e1:7e:56:0d:d1:b0:15:ab:36:40:a9:f3:03:86:
bb:62:f8:e3:ef:14:7e:d9:28:06:8e:54:81:92:7c:41:7f:d6:
ba:43:df:c7:0c:bf:c2:75:db:8d:4a:55:bd:26:2e:fa:73:ce:
b1:ee:99:20:96:76:a0:50:45:09:29:9b:84:56:65:2f:da:61:
e9:e1:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:17:31 2024 by rpki-client on console-fra.rpki-client.org