Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UMiCZh2YmVV_Vis2vz06yPELPJ0.cer
File: UMiCZh2YmVV_Vis2vz06yPELPJ0.cer (raw, json)
Hash identifier: 9n5O7PvOphO4Dh5PZVXyPHICt+noy9Te+qw4wItl7ns=
Subject key identifier: 50:C8:82:66:1D:98:99:55:7F:56:2B:36:BF:3D:3A:C8:F1:0B:3C:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3BBF529BDDC542DBFAC54045501B82A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/14c39e-7390-4d30-94f4-7783ca43213a/1/UMiCZh2YmVV_Vis2vz06yPELPJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/14c39e-7390-4d30-94f4-7783ca43213a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jan 2024 13:53:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207911
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:bf:52:9b:dd:c5:42:db:fa:c5:40:45:50:1b:82:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 13:53:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50c882661d9899557f562b36bf3d3ac8f10b3c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:cf:a3:6d:f6:35:f5:b8:73:55:42:12:e8:
df:d2:02:70:74:e1:b1:b9:95:76:8e:1c:3d:a2:a5:
bd:c9:7f:61:ff:8b:63:ab:5d:aa:c2:da:f4:20:d2:
47:43:ac:9a:b6:c0:d6:0c:26:99:df:1c:74:82:80:
96:05:78:2f:4d:5d:aa:3c:6b:3b:97:50:67:87:0d:
26:1b:47:5e:36:01:1a:c0:db:51:cb:2d:50:61:0e:
2a:9e:25:4a:ef:b3:31:2c:d3:f6:09:b7:a2:34:3b:
e1:35:e7:b5:c9:1d:ac:c6:25:ff:32:8e:0a:93:3e:
bd:20:53:b8:a5:58:54:e1:59:88:24:66:d2:0e:30:
81:5f:7f:2d:1c:12:bc:62:0f:34:4a:38:39:3f:f7:
78:bb:38:40:cf:a2:38:ca:fa:11:ba:7a:83:3f:e3:
b6:88:ef:bc:2b:9e:ff:37:4c:d3:7c:08:5e:09:06:
a2:c4:c7:f3:d0:b9:10:0c:73:cc:06:3b:81:f8:dc:
c7:c5:a3:6c:d3:ef:81:0d:9d:c9:a1:d7:fc:57:75:
f1:71:62:d7:d2:8c:99:56:29:db:e6:3b:de:77:9d:
46:ee:9c:ca:4b:1f:a3:70:91:30:8b:73:4e:be:41:
e2:09:35:df:31:f0:03:57:58:5e:4e:b2:94:24:1c:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:82:66:1D:98:99:55:7F:56:2B:36:BF:3D:3A:C8:F1:0B:3C:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/14c39e-7390-4d30-94f4-7783ca43213a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/14c39e-7390-4d30-94f4-7783ca43213a/1/UMiCZh2YmVV_Vis2vz06yPELPJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207911
Signature Algorithm: sha256WithRSAEncryption
78:3a:0e:a5:bd:44:d1:d6:6d:48:cd:98:49:b9:fb:98:41:49:
3b:67:62:33:58:81:71:42:61:3f:95:e4:bf:cd:48:40:04:63:
81:a2:9d:4e:30:9d:df:d7:84:04:fe:8a:fb:00:56:c3:f0:28:
81:04:0b:ed:41:28:77:b5:a7:92:65:f1:c9:ec:4a:63:b6:ee:
dc:3f:4a:12:f7:ad:d8:4e:df:4a:0e:bb:a5:24:73:0a:fa:18:
b0:15:01:6d:2e:ac:cc:f3:92:40:18:a1:51:27:1f:53:7a:c7:
f9:5c:2d:97:cc:2d:9e:89:36:55:ff:4b:b9:fc:ee:85:ab:f5:
d4:a8:d5:97:77:86:89:b6:25:11:4a:cb:f6:77:b7:45:e0:34:
ba:5c:06:b4:b5:84:0f:1f:63:1e:f6:cb:62:09:88:99:4f:e5:
a5:f7:42:ff:5e:3d:67:4b:73:05:5e:ba:b5:89:7d:2c:07:f2:
a2:88:5e:1e:9c:98:83:c3:18:5d:ae:79:22:7b:de:31:2a:de:
cc:84:90:a8:9c:cf:b4:80:de:07:b9:d7:6a:5d:a1:5e:1b:5d:
f2:47:f8:82:f5:8e:be:9f:3a:0c:da:c3:4c:8b:0e:6f:39:2c:
25:93:ef:c4:64:0b:9d:c5:3c:81:ae:fb:1e:61:62:fc:6e:50:
da:97:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:16 2024 by rpki-client on console-ams.rpki-client.org