Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
File: ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer (raw, json)
Hash identifier: jpbT1Ucw6BeEWcGLETYRN2Qp+kR787wiOBEP1LRu3Ns=
Subject key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF97B0E08792821988356B51D164E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 129.125.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:97:b0:e0:87:92:82:19:88:35:6b:51:d1:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:3c:45:b6:2e:8b:32:80:c2:21:66:de:ce:
a5:c0:0a:34:08:7a:32:7b:5f:b5:28:6a:0e:1b:f4:
b0:81:95:28:05:19:b5:8a:1a:dc:83:2e:77:b7:1b:
08:50:9c:f2:c9:53:d6:c3:4f:02:de:f5:ef:cc:fc:
61:c8:39:51:bc:f8:e2:41:e3:dc:1e:b6:cb:2a:6d:
60:18:c6:15:ac:65:e4:9b:88:59:6e:a2:87:05:32:
ea:e7:ef:4a:52:f7:18:de:a4:d9:e8:a9:ad:1d:b2:
75:07:3e:02:d3:11:f7:58:53:e5:91:c8:5c:73:e6:
d1:18:e6:17:4d:2e:16:bc:03:9e:14:38:90:88:9f:
88:7b:71:b2:7e:7d:5e:37:f8:95:37:e8:a8:5c:b0:
51:22:bf:c0:a7:9a:a6:5c:3c:f0:0d:2a:02:fb:65:
17:36:d6:f4:05:d0:a1:45:ba:2b:2a:50:23:b1:8d:
52:c4:86:be:b5:07:fb:4c:18:f1:6e:aa:ea:8f:df:
f2:54:9e:be:7a:93:bd:2d:67:90:f8:76:55:4d:46:
3f:67:df:2d:e1:75:c2:b9:af:57:8f:f9:4b:5a:b3:
c0:a8:77:aa:f9:36:81:71:a8:1c:c8:19:80:77:94:
1b:a4:d8:e1:64:73:a9:05:5c:e9:e4:40:c8:44:10:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:00:47:b3:34:aa:35:2f:70:a2:56:df:bd:97:ef:4f:00:ef:
a7:dd:c7:bb:57:17:04:2a:86:a2:4e:9f:e3:a9:0e:16:60:a6:
08:c8:93:a0:60:1b:45:d8:c2:d1:20:66:e4:77:68:58:aa:86:
6e:61:d7:8a:f8:c7:61:09:d1:4b:40:10:01:de:a5:03:48:e7:
f0:4f:04:51:79:fa:6c:1f:cb:95:0c:7f:77:24:71:47:6c:73:
bc:98:f9:24:bf:31:83:ab:57:a3:6a:03:fe:e6:d2:65:c1:70:
00:a7:ba:61:a7:a3:44:ad:f6:be:b6:e6:bf:75:53:ab:41:e7:
b7:f0:c7:7e:8a:02:a9:66:00:c0:7d:73:a1:db:e1:dc:6d:2b:
25:a2:79:e4:02:2e:c8:6a:eb:20:6b:fe:75:2a:79:7a:de:54:
49:65:4e:40:3f:e7:8f:11:b7:ce:ce:a7:ae:b0:9f:3c:65:9c:
98:ef:39:33:8a:01:c2:4f:1b:6b:bd:90:d3:7b:80:54:64:17:
b0:85:b6:52:c7:e8:51:71:ba:7d:05:6f:a1:d8:b1:e2:98:06:
23:6f:65:c9:42:19:f8:fa:5f:29:57:84:c1:ca:af:f6:93:8a:
69:3a:09:d4:c7:dc:2e:9c:a4:43:63:3e:bc:aa:46:1d:c6:d0:
fa:7b:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:19:39 2024 by rpki-client on console-fra.rpki-client.org