Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
File: UJSiarpxAHYh_VmdU3u3rqreizM.cer (raw, json)
Hash identifier: JPYE/I+95PFVEHnOijqUtjnaFUldu4p0HzoUGJk1EbQ=
Subject key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99B09E24EE9A2E7E3487778A72BF61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.66.152.0/21
IP: 155.133.224.0/19
IP: 185.25.180.0/22
IP: 2a01:bc80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b0:9e:24:ee:9a:2e:7e:34:87:77:8a:72:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:1b:73:ac:94:84:41:99:38:a8:39:fd:3a:
ec:21:9a:eb:d1:d9:a3:43:10:98:1c:ee:05:fc:da:
12:0c:0a:92:03:f6:e1:71:8b:71:b2:33:b6:5e:7c:
fd:47:3d:a9:2d:79:18:d1:ef:6f:4b:87:8e:10:59:
0d:e0:04:ca:a0:35:10:61:9a:c7:7e:94:3f:0e:4f:
90:a7:0a:6c:36:2c:7a:05:5c:00:1e:02:8c:80:b4:
ae:2b:de:1d:f2:99:61:9c:91:6f:04:2c:60:72:0a:
a5:fd:f5:f0:48:3a:c9:df:19:55:bb:a0:8d:0e:31:
45:17:5f:63:1a:e0:04:84:39:1d:29:e1:3e:c6:12:
e6:24:fd:3c:9b:4b:71:94:06:e7:1c:f6:8b:79:95:
c6:94:1a:12:28:77:a2:06:84:41:07:55:07:d2:3d:
4c:dd:77:77:4b:c3:ff:3c:12:ca:33:3e:38:8e:8d:
7b:45:15:de:3e:07:8a:d6:c8:51:27:18:ed:7c:e6:
3d:12:5f:30:1d:69:8f:dc:7d:92:19:fc:04:6d:ee:
cd:3f:05:9f:e4:3a:c6:d8:94:60:ad:49:83:49:ae:
ca:6f:75:71:60:d1:43:86:5d:09:e2:33:d6:99:bf:
a7:38:bb:fb:f8:7d:5e:b3:ca:25:1e:c2:45:f4:ed:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.152.0/21
155.133.224.0/19
185.25.180.0/22
IPv6:
2a01:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
95:cf:f0:ca:cb:61:57:78:a9:e5:fe:a5:24:a6:50:57:ea:9b:
c1:02:d8:f1:46:11:f9:5b:f0:2d:ba:b8:d2:75:44:3e:2e:d9:
b3:df:2f:02:a8:62:01:bc:db:7e:ea:22:22:d0:3e:cd:04:9b:
70:c5:bb:4a:2b:f0:47:bb:63:15:a1:95:de:77:f4:63:b6:9c:
ab:ed:df:95:b4:48:d9:3a:88:99:74:c1:46:93:2a:fb:4a:ee:
b5:b3:9c:d9:ae:d8:ab:22:df:24:42:f9:44:0b:c2:48:ed:16:
4d:3e:07:c1:ca:e1:26:03:03:df:2b:ae:38:f1:39:c8:89:4b:
3a:d8:a0:22:73:f1:6b:ee:62:59:0f:a3:66:25:c4:82:fd:a4:
0b:f4:9b:4d:73:e7:06:ca:1e:e8:6c:77:d1:24:b9:d1:52:80:
f1:be:7e:17:1e:40:02:68:44:1c:59:c8:fa:7a:e6:09:7a:9b:
84:3f:33:6f:04:28:78:6d:e0:f5:71:ee:5a:9b:23:f1:e0:90:
ca:18:e8:5e:5f:be:a6:5e:f8:dc:e3:4e:78:25:72:0d:22:d4:
95:e8:40:cd:99:4a:ba:c1:87:df:58:1a:91:88:fe:fb:f9:de:
49:ee:26:7a:ed:8b:41:c9:6d:f7:02:41:38:64:ba:67:93:6f:
a4:94:38:d1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzKmbCeJO6aLn40h3eKcr9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDk0YTI2YWJhNzEwMDc2MjFmZDU5OWQ1MzdiYjdhZWFhZGU4YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsscbc6yUhEGZOKg5/TrsIZrr0dmj
QxCYHO4F/NoSDAqSA/bhcYtxsjO2Xnz9Rz2pLXkY0e9vS4eOEFkN4ATKoDUQYZrH
fpQ/Dk+QpwpsNix6BVwAHgKMgLSuK94d8plhnJFvBCxgcgql/fXwSDrJ3xlVu6CN
DjFFF19jGuAEhDkdKeE+xhLmJP08m0txlAbnHPaLeZXGlBoSKHeiBoRBB1UH0j1M
3Xd3S8P/PBLKMz44jo17RRXePgeK1shRJxjtfOY9El8wHWmP3H2SGfwEbe7NPwWf
5DrG2JRgrUmDSa7Kb3VxYNFDhl0J4jPWmb+nOLv7+H1es8olHsJF9O0+QwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFFCUomq6cQB2If1ZnVN7t66q3oszMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzlmY2U3
OC00ZjlkLTQ4NDctYjc1OS1iNDUxZTQ3N2I5YzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOWZjZTc4
LTRmOWQtNDg0Ny1iNzU5LWI0NTFlNDc3YjljMi8xL1VKU2lhcnB4QUhZaF9WbWRV
M3UzcnFyZWl6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDkkKYAwQFm4XgAwQCuRm0MA0EAgACMAcDBQAq
AbyAMA0GCSqGSIb3DQEBCwUAA4IBAQCVz/DKy2FXeKnl/qUkplBX6pvBAtjxRhH5
W/AturjSdUQ+Ltmz3y8CqGIBvNt+6iIi0D7NBJtwxbtKK/BHu2MVoZXed/Rjtpyr
7d+VtEjZOoiZdMFGkyr7Su61s5zZrtirIt8kQvlEC8JI7RZNPgfByuEmAwPfK644
8TnIiUs62KAic/Fr7mJZD6NmJcSC/aQL9JtNc+cGyh7obHfRJLnRUoDxvn4XHkAC
aEQcWcj6euYJepuEPzNvBCh4beD1ce5amyPx4JDKGOheX76mXvjc4054JXINItSV
6EDNmUq6wYffWBqRiP77+d5J7iZ67YtByW33AkE4ZLpnk2+klDjR
-----END CERTIFICATE-----
Generated at Fri May 3 01:46:34 2024 by rpki-client on console-ams.rpki-client.org