Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
File: UJSiarpxAHYh_VmdU3u3rqreizM.cer (raw, json)
Hash identifier: NTpSyFyzYn0Qr90d6Lhad3Y0l3SHJqJaB3NrHB/f6hc=
Subject key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206846B06B4B0CA6462CC0B96494B683
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 146.66.152.0/21
IP: 155.133.224.0/19
IP: 185.25.180.0/22
IP: 2a01:bc80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:b0:6b:4b:0c:a6:46:2c:c0:b9:64:94:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:1b:73:ac:94:84:41:99:38:a8:39:fd:3a:
ec:21:9a:eb:d1:d9:a3:43:10:98:1c:ee:05:fc:da:
12:0c:0a:92:03:f6:e1:71:8b:71:b2:33:b6:5e:7c:
fd:47:3d:a9:2d:79:18:d1:ef:6f:4b:87:8e:10:59:
0d:e0:04:ca:a0:35:10:61:9a:c7:7e:94:3f:0e:4f:
90:a7:0a:6c:36:2c:7a:05:5c:00:1e:02:8c:80:b4:
ae:2b:de:1d:f2:99:61:9c:91:6f:04:2c:60:72:0a:
a5:fd:f5:f0:48:3a:c9:df:19:55:bb:a0:8d:0e:31:
45:17:5f:63:1a:e0:04:84:39:1d:29:e1:3e:c6:12:
e6:24:fd:3c:9b:4b:71:94:06:e7:1c:f6:8b:79:95:
c6:94:1a:12:28:77:a2:06:84:41:07:55:07:d2:3d:
4c:dd:77:77:4b:c3:ff:3c:12:ca:33:3e:38:8e:8d:
7b:45:15:de:3e:07:8a:d6:c8:51:27:18:ed:7c:e6:
3d:12:5f:30:1d:69:8f:dc:7d:92:19:fc:04:6d:ee:
cd:3f:05:9f:e4:3a:c6:d8:94:60:ad:49:83:49:ae:
ca:6f:75:71:60:d1:43:86:5d:09:e2:33:d6:99:bf:
a7:38:bb:fb:f8:7d:5e:b3:ca:25:1e:c2:45:f4:ed:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.152.0/21
155.133.224.0/19
185.25.180.0/22
IPv6:
2a01:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:9b:68:0b:73:d4:62:b8:64:b7:00:33:f7:dc:60:9a:23:92:
ba:a3:06:92:bc:f5:4f:af:eb:23:87:e7:5a:3d:c9:76:ab:77:
c8:03:11:74:df:ea:05:bb:c0:88:dc:21:8a:66:96:e1:4b:50:
96:4a:de:26:4c:b0:28:bd:bf:24:08:17:55:36:08:83:40:60:
96:5a:6f:f7:80:9f:89:a8:86:06:c5:0f:25:81:fc:42:ff:40:
34:9f:f5:fc:57:d4:ae:5d:5f:39:74:1a:2f:ed:ab:de:76:f2:
c2:09:71:1a:5e:d5:ea:59:4e:75:da:c2:99:1b:47:70:87:7d:
2a:04:ba:f0:83:b1:60:52:17:d3:58:63:eb:0b:cc:9f:05:20:
2c:c7:84:68:be:ae:90:6a:80:e3:9f:d8:cb:d1:6c:c2:4a:1b:
1a:f2:af:f7:87:4d:45:64:81:89:53:57:0a:3a:fe:6a:16:59:
52:e1:2d:f9:8c:2e:b1:37:29:ba:9e:41:99:6d:53:70:07:ee:
2c:29:eb:a4:af:98:40:af:7e:97:ea:1a:b5:be:f9:b8:5f:1f:
ca:41:91:e1:56:3c:1f:cb:3e:c5:8c:ca:2f:7c:77:e4:2d:92:
60:c8:ef:15:f8:c2:12:32:3d:2f:8a:c0:78:06:09:16:87:92:
f2:98:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:41:13 2025 by rpki-client