Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer
File: UUq20WoLF2_UBlXhf73mUrwh1FM.cer (raw, json)
Hash identifier: 803liB3ifoXOcajDIxG+q4X8FrdflQcUw9Ltfx2Yn0g=
Subject key identifier: 51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F5EA28399C923F17CACB389DCE67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8652
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f5:ea:28:39:9c:92:3f:17:ca:cb:38:9d:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=514ab6d16a0b176fd40655e17fbde652bc21d453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:41:dc:d2:87:a5:d3:9c:3c:96:dc:93:16:
07:6f:6e:82:96:84:73:06:f2:fa:a8:4e:85:5e:c0:
d4:93:5e:4a:55:fc:a7:24:40:23:3a:15:54:a2:1c:
b7:18:ef:72:67:d8:8a:1e:63:24:aa:fd:9c:04:9b:
8d:f0:e0:f8:54:9b:78:b5:75:9f:6a:3e:50:dc:08:
9b:58:6e:f8:35:59:aa:48:80:53:cb:2c:db:2c:34:
d4:22:8a:fe:fe:ac:44:b9:af:db:01:9f:85:9b:7f:
e4:01:97:86:dd:96:71:2d:1d:c0:97:a8:9e:b6:c9:
49:3e:dc:29:81:61:09:87:cc:08:b9:4f:95:ea:20:
e5:3d:94:c6:33:c5:17:d7:f2:96:48:3a:72:05:03:
4a:59:d6:17:b1:82:fa:b6:fe:a3:0c:57:9b:77:d7:
7a:9d:9c:95:af:9b:9d:8f:4a:92:3d:23:87:56:ba:
74:9d:8f:df:a3:62:7d:bd:4e:48:84:d1:23:72:cf:
e4:d3:eb:20:66:6b:21:a1:c0:d6:fd:cd:f0:b1:42:
9a:a0:76:4b:f0:bb:86:35:a5:f4:5d:86:8e:d4:35:
f9:fc:62:21:3c:f7:37:bb:5d:4e:e4:1d:13:58:c7:
c0:24:53:27:60:c8:9c:70:b2:af:b6:43:88:1d:25:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8652
Signature Algorithm: sha256WithRSAEncryption
ad:16:07:b0:2a:6f:ff:8a:57:c9:d1:ad:b6:3b:bd:50:78:9a:
77:3d:3c:24:34:f0:0f:40:80:5d:4b:1c:3d:c9:7b:fc:4c:a7:
0a:b3:9a:ad:05:89:10:23:69:b9:c9:77:1f:ac:bd:bf:69:bd:
e4:7f:59:ab:49:c6:1b:38:19:46:54:ec:cc:6f:4c:1e:e2:6d:
01:0e:f0:00:f7:6e:65:da:31:fc:ef:db:80:4e:04:14:65:7f:
ce:05:40:62:d9:be:6d:58:fb:35:4a:a5:ff:0a:97:22:82:2a:
6f:1e:93:cb:81:13:5b:ee:d3:fa:66:b0:bf:fc:1f:f0:aa:57:
c0:3b:30:b2:5f:4f:5a:16:52:2c:6c:b9:55:15:96:90:ae:27:
df:3e:75:91:ca:a9:d0:b1:d0:d1:27:7a:2c:16:5c:8b:9b:49:
25:0d:2b:5f:c0:08:91:99:b4:1c:40:9c:2d:80:01:cf:6a:42:
20:9c:c6:04:15:7a:d7:66:d1:77:2e:7b:01:47:ff:d8:30:33:
79:d8:ce:a9:91:f6:f7:f2:41:b3:9a:62:bb:00:a0:90:09:1e:
d3:c0:ff:2b:87:94:f6:e0:b9:bb:2a:cb:04:3d:27:2e:6a:65:
74:0b:d8:71:97:49:1d:a3:f7:8f:da:58:60:32:54:dd:1f:c5:
e8:ac:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:39 2024 by rpki-client on console-ams.rpki-client.org