Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer (raw, json)
Hash identifier: E9QsZd+mPPhQ+e5vBEYSg8sU/ue6/o/Ccyt/EHJPimE=
Subject key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC1A3285D578596D41AB75EE153A4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204185
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:32:85:d5:78:59:6d:41:ab:75:ee:15:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:80:92:bb:3c:fb:24:78:cc:a6:34:8e:5c:
46:06:28:ff:05:9d:af:ad:73:53:b6:13:63:cb:de:
fd:a3:56:8b:4f:b1:64:66:da:64:79:8d:95:2a:a0:
52:68:aa:4a:52:8f:be:88:ef:e3:9d:6d:87:d4:05:
fe:4c:75:ee:1a:ae:87:4f:45:18:59:a9:ad:77:db:
25:42:c5:1e:8e:dc:56:6a:df:9b:ac:47:a8:11:14:
69:45:82:eb:e2:a1:2e:5d:64:44:82:b4:46:62:59:
4e:f9:e8:1d:87:5c:13:67:07:8c:31:08:c6:b3:45:
dd:19:09:62:7f:18:5e:02:2c:10:03:6a:8d:ec:86:
cf:ee:2c:f0:77:37:d0:0c:a5:06:7f:43:e0:11:a2:
73:89:89:cb:eb:4e:17:36:61:36:4e:dc:35:da:c6:
f0:aa:25:0c:de:0b:da:63:cc:7a:18:83:18:45:89:
57:e9:a3:30:40:c6:79:16:fc:4f:9a:4e:fd:37:72:
4b:fa:79:89:65:38:15:fe:ca:a2:1f:a6:d2:1d:28:
21:dd:81:bb:9e:be:f5:ae:16:7c:d3:1d:a0:1b:9e:
72:0f:05:0b:03:ab:ea:84:72:e5:7e:c1:88:54:3c:
3f:b1:f2:f3:8b:0b:d1:22:df:db:6b:97:3b:13:ab:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204185
Signature Algorithm: sha256WithRSAEncryption
79:1b:d8:71:c0:b1:b0:9c:13:2e:b0:79:b4:9e:1f:33:52:97:
1e:c5:80:5c:fb:d0:2a:ea:60:27:39:a3:08:de:67:5b:8e:7b:
d8:97:53:fc:29:08:ec:2d:fa:69:2d:b7:60:80:60:1f:f0:ae:
c6:8e:92:23:15:cd:7c:56:9f:49:18:9a:6f:ad:b9:14:86:70:
c8:52:d1:4c:08:0e:f1:9c:0f:a1:75:f6:e7:12:77:fb:08:3c:
10:62:cb:b9:db:ea:ca:94:e6:4c:07:37:02:7a:4a:aa:9d:f9:
c7:f1:29:25:5a:b7:11:36:50:f0:26:5d:98:03:ea:d7:9a:34:
17:31:62:34:ce:ad:ba:e0:29:b3:e9:b2:3c:71:6f:32:2e:dc:
d3:fc:31:5a:cb:ee:6c:4b:81:4c:68:12:50:b6:c7:aa:53:6f:
fe:ac:99:64:d8:25:32:9f:7e:22:81:6a:f9:fd:35:09:bf:fb:
33:87:5e:41:70:a0:dd:4b:08:12:87:e7:12:48:67:6a:04:9d:
46:8a:c7:c6:34:9d:d5:15:5b:74:29:71:82:fe:4a:d1:ea:c9:
d6:46:fc:b7:be:b6:a8:ad:b7:41:56:e3:df:1c:1f:ae:52:b1:
8b:3c:87:83:2d:2e:6f:67:3e:d8:40:27:31:7e:05:0f:e5:6a:
52:32:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:00 2025 by rpki-client