Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
File: USzy1zi8akeL64yogkEB_w_IGmE.cer (raw, json)
Hash identifier: urOveVMcdYP6LLqjyHuyFaH3uVzMsPZmcf2ggV2u+DU=
Subject key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748495C900749E1271C91001DBA71E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51068
IP: 194.28.200.0/22
IP: 194.165.8.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:49:5c:90:07:49:e1:27:1c:91:00:1d:ba:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:a8:f1:f0:75:41:21:e6:44:b8:81:ef:5e:
76:93:92:cd:84:a4:5e:df:8c:84:ec:8f:48:2d:8c:
25:49:b7:de:f7:62:06:50:4f:24:4c:e4:25:6f:31:
8a:3c:9a:12:f1:37:c8:86:20:26:01:c2:bb:34:e2:
bd:7a:a5:aa:ee:95:12:d8:cc:ca:1b:a1:b1:35:09:
e0:22:f5:d0:95:58:d5:7a:91:df:e7:b5:a5:9b:dc:
fe:90:eb:35:a8:f7:f2:8c:7e:8b:2f:44:3a:29:ae:
70:c4:65:34:f2:7a:77:c2:ac:fe:51:17:03:6c:da:
7c:5d:c7:f4:d3:8c:fd:9c:77:11:87:05:8e:e1:bf:
ec:d9:41:f1:93:49:e4:c0:f4:9b:0a:d8:9d:39:fc:
e0:10:47:d4:71:8c:69:d4:1a:a2:47:28:d0:17:56:
04:db:b8:bd:16:25:48:57:23:ad:99:70:c1:e1:6f:
2a:9b:c4:97:4e:19:0e:c6:f5:ca:eb:f7:c1:04:b7:
90:f1:19:38:d2:a5:08:05:3c:ac:51:c0:1b:9a:0a:
dd:7a:ae:a8:74:a1:aa:7b:e2:5c:7e:a7:8d:d7:61:
9d:b7:40:13:ad:e9:21:b8:fb:6e:00:cd:07:a0:1c:
9f:d7:e7:97:47:51:c9:a3:09:a9:97:1d:4f:2b:42:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.200.0/22
194.165.8.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51068
Signature Algorithm: sha256WithRSAEncryption
9f:2f:e2:3f:ad:b6:2a:16:82:0c:b2:3c:d3:14:b4:35:d7:95:
ea:84:3f:96:de:fe:f2:ae:21:cc:a5:21:a2:39:bb:f0:8b:df:
95:b4:84:fd:4b:fb:42:dc:fb:06:21:a5:21:78:cb:80:67:4b:
7e:d7:c4:fb:a9:27:e9:15:a6:6f:43:f5:b5:9c:a7:2a:21:96:
48:2b:64:77:a1:09:6a:0c:57:66:b7:d4:14:89:97:1c:17:e5:
0e:10:b8:5c:58:dd:7c:9c:bf:5b:6f:f1:dc:af:6d:96:64:20:
f4:20:80:21:fa:3c:07:e8:a6:f1:fb:b5:0f:65:87:6c:88:b7:
94:af:fa:46:2a:09:34:03:10:a8:9d:2f:69:43:a3:ea:24:ef:
e6:8c:01:2b:f7:0e:cd:7d:05:d3:c0:73:df:f9:bc:85:2c:1f:
7b:df:cf:85:da:2d:33:18:54:86:f4:3d:5f:66:bf:af:a7:9e:
b5:0d:88:c1:de:12:d9:35:b8:9c:73:68:f0:a9:20:1f:27:54:
51:f2:cb:53:67:eb:a6:52:99:bd:46:5a:42:fd:51:b4:0d:e8:
0f:6e:f4:26:d4:14:73:19:83:a1:c4:30:b4:e6:d6:a9:47:63:
ea:5b:20:d7:25:b9:28:0b:69:4c:04:ca:35:e1:48:1d:f2:63:
a6:1c:57:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:16 2025 by rpki-client