Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.cer (raw, json)
Hash identifier: 1iSyrc4fB4ma6lgo7DNUHcT8O6V3CCvARaFoKxH4QEM=
Subject key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D598E7051BDE12A1FC8A83766116C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215750
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:e7:05:1b:de:12:a1:fc:8a:83:76:61:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516d94064f738555e8ce365a1957d69e768809c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:f4:93:02:0f:9c:65:22:72:47:d1:47:6a:
83:78:fe:70:02:34:61:af:80:c8:bd:93:52:0f:a7:
27:53:28:1d:85:08:28:e4:fd:f8:ac:fb:fe:a6:57:
bf:15:bc:74:2b:b4:14:45:8a:eb:33:ec:8e:08:b8:
c1:58:a3:81:d4:a7:a5:cc:c9:6a:a4:8f:8f:79:84:
6f:06:15:9e:42:4d:85:17:fa:87:f1:cb:f5:eb:27:
6b:80:a2:24:20:e5:d7:3e:57:8b:d6:97:dc:bc:12:
02:75:25:aa:32:cd:41:95:f2:b5:8d:4d:bd:6a:00:
98:29:d4:9b:34:70:82:97:6c:c6:0b:18:c8:af:e5:
9d:75:06:eb:f7:f3:27:0f:6a:f9:8b:5e:eb:22:d7:
cb:1d:a8:1a:14:ba:dc:5d:1f:f6:19:bf:0e:42:5d:
a1:5a:3b:01:fa:d8:7e:5e:a7:af:a7:3d:0d:6c:c0:
f1:3b:b5:a0:22:d9:96:41:9c:2f:1b:98:aa:53:12:
db:61:ef:f9:34:16:5b:cc:78:bc:9b:95:a3:00:98:
8a:03:b8:cd:ed:86:6e:e8:d6:06:de:29:46:ee:f2:
f4:55:c5:4d:a5:95:11:a9:0d:c2:b2:b2:2e:fe:fb:
8b:60:ba:f3:1f:64:f6:ca:51:e6:6e:bb:29:e7:4f:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215750
Signature Algorithm: sha256WithRSAEncryption
96:a8:29:df:6e:9a:83:e3:4e:66:e3:54:a7:0b:1a:22:31:79:
4b:c8:89:58:c7:61:00:7c:b1:fe:d8:51:b9:2b:ba:8b:0f:fc:
f6:21:d7:4f:9c:5d:b1:14:11:60:3d:04:6f:d4:46:5a:70:8f:
7d:78:86:87:4f:83:67:00:af:1c:d9:35:16:2e:25:32:11:43:
ea:bd:92:9d:6e:63:ba:aa:5f:39:54:43:26:6b:69:17:96:d6:
7c:8e:4e:14:31:99:10:d5:c9:63:20:2e:5b:38:42:b5:52:10:
97:ac:cb:cd:ad:e6:2f:84:f8:65:3c:b4:53:f4:c1:8c:16:db:
5d:54:1c:ad:a4:c3:01:34:3f:fd:89:f2:56:61:2c:2c:7d:d4:
51:d7:14:1d:df:6f:f8:8d:d8:3d:d1:bb:19:34:f8:ad:ab:44:
38:75:cf:9d:32:08:b6:88:89:af:a3:8a:8a:d9:d4:35:ee:1d:
7e:8c:4c:ab:11:6f:45:56:6f:ab:8a:70:48:75:a6:88:ef:58:
99:19:a7:aa:5c:13:06:1c:bf:45:cf:e3:8e:65:9b:21:a8:7c:
da:e0:d7:e9:98:dd:2a:04:89:6b:54:78:79:bb:ad:76:78:2a:
87:84:93:34:93:65:46:94:bb:1a:a5:23:34:17:9e:38:97:47:
11:01:77:ee
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1ZjnBRveEqH8ioN2YRbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTZkOTQwNjRmNzM4NTU1ZThjZTM2NWExOTU3ZDY5ZTc2ODgwOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisP0kwIPnGUickfRR2qDeP5wAjRh
r4DIvZNSD6cnUygdhQgo5P34rPv+ple/Fbx0K7QURYrrM+yOCLjBWKOB1KelzMlq
pI+PeYRvBhWeQk2FF/qH8cv16ydrgKIkIOXXPleL1pfcvBICdSWqMs1BlfK1jU29
agCYKdSbNHCCl2zGCxjIr+WddQbr9/MnD2r5i17rItfLHagaFLrcXR/2Gb8OQl2h
WjsB+th+Xqevpz0NbMDxO7WgItmWQZwvG5iqUxLbYe/5NBZbzHi8m5WjAJiKA7jN
7YZu6NYG3ilG7vL0VcVNpZURqQ3CsrIu/vuLYLrzH2T2ylHmbrsp508XLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFFtlAZPc4VV6M42WhlX1p52iAnEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2I4MTg5
NS1jNjA1LTQxZTItYjI4My1jMDU2NWZhODQwZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvYjgxODk1
LWM2MDUtNDFlMi1iMjgzLWMwNTY1ZmE4NDBkNC8xL1VXMlVCazl6aFZYb3pqWmFH
VmZXbm5hSUNjUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNKxjANBgkqhkiG9w0BAQsFAAOCAQEAlqgp326ag+NO
ZuNUpwsaIjF5S8iJWMdhAHyx/thRuSu6iw/89iHXT5xdsRQRYD0Eb9RGWnCPfXiG
h0+DZwCvHNk1Fi4lMhFD6r2SnW5juqpfOVRDJmtpF5bWfI5OFDGZENXJYyAuWzhC
tVIQl6zLza3mL4T4ZTy0U/TBjBbbXVQcraTDATQ//YnyVmEsLH3UUdcUHd9v+I3Y
PdG7GTT4ratEOHXPnTIItoiJr6OKitnUNe4dfoxMqxFvRVZvq4pwSHWmiO9YmRmn
qlwTBhy/Rc/jjmWbIah82uDX6ZjdKgSJa1R4ebutdngqh4STNJNlRpS7GqUjNBee
OJdHEQF37g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:32 2025 by rpki-client