Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer (raw, json)
Hash identifier: tSuyGYU8GXs1PsNA2BrZn6j6w2RTk65+GmOdZo8477k=
Subject key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF9C00BF8F752AB45D3207659FBE27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204185
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9c:00:bf:8f:75:2a:b4:5d:32:07:65:9f:be:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:80:92:bb:3c:fb:24:78:cc:a6:34:8e:5c:
46:06:28:ff:05:9d:af:ad:73:53:b6:13:63:cb:de:
fd:a3:56:8b:4f:b1:64:66:da:64:79:8d:95:2a:a0:
52:68:aa:4a:52:8f:be:88:ef:e3:9d:6d:87:d4:05:
fe:4c:75:ee:1a:ae:87:4f:45:18:59:a9:ad:77:db:
25:42:c5:1e:8e:dc:56:6a:df:9b:ac:47:a8:11:14:
69:45:82:eb:e2:a1:2e:5d:64:44:82:b4:46:62:59:
4e:f9:e8:1d:87:5c:13:67:07:8c:31:08:c6:b3:45:
dd:19:09:62:7f:18:5e:02:2c:10:03:6a:8d:ec:86:
cf:ee:2c:f0:77:37:d0:0c:a5:06:7f:43:e0:11:a2:
73:89:89:cb:eb:4e:17:36:61:36:4e:dc:35:da:c6:
f0:aa:25:0c:de:0b:da:63:cc:7a:18:83:18:45:89:
57:e9:a3:30:40:c6:79:16:fc:4f:9a:4e:fd:37:72:
4b:fa:79:89:65:38:15:fe:ca:a2:1f:a6:d2:1d:28:
21:dd:81:bb:9e:be:f5:ae:16:7c:d3:1d:a0:1b:9e:
72:0f:05:0b:03:ab:ea:84:72:e5:7e:c1:88:54:3c:
3f:b1:f2:f3:8b:0b:d1:22:df:db:6b:97:3b:13:ab:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204185
Signature Algorithm: sha256WithRSAEncryption
44:4b:62:f1:6d:2e:53:91:8b:7b:01:d3:ff:66:85:fc:d2:1d:
e3:1e:64:0b:e4:43:19:e7:5a:5e:78:97:57:e9:31:03:36:a5:
29:80:14:4b:b8:a8:d6:9d:f9:01:b2:78:2e:ef:49:6e:f3:83:
09:44:2d:0d:17:8f:53:66:8a:e0:22:dd:2e:ab:96:b3:b3:13:
16:75:c3:7e:35:1a:43:11:5b:bf:b0:9d:79:8c:16:4a:ee:3d:
e0:83:3b:a3:49:5e:e3:59:3d:9b:f0:78:37:4c:a8:52:72:c2:
8c:d1:c2:55:30:80:96:53:11:6c:cd:36:89:55:b6:f4:91:dd:
f6:ab:1b:53:81:40:45:b1:6b:b4:f1:9b:7f:06:db:96:94:76:
b0:7d:5b:5c:cd:be:17:e4:10:d0:fa:5e:bd:36:0f:a2:f7:bd:
94:47:fe:99:3b:55:0b:5e:89:40:c1:27:94:12:4b:a9:f4:f6:
54:6f:51:22:31:4d:4a:c3:ba:a5:cf:d7:10:f8:01:8e:99:58:
26:67:08:88:a4:ae:a3:99:2e:5b:2b:ff:e2:8e:f2:a6:60:2b:
a1:64:75:e6:84:4b:65:0b:07:56:2c:4c:8f:43:78:cd:48:11:
18:2e:73:1a:8f:28:29:e0:f6:84:af:7f:b3:f3:2f:04:3f:5c:
75:c9:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:35 2024 by rpki-client on console-ams.rpki-client.org