Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer (raw, json)
Hash identifier: 7ugbXSpyi71ZfD5+8+70KB2Pf3a9kzR7PmbMxZKMUsI=
Subject key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193008845D39726A175F2E002A45CE5D54C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Nov 2024 08:12:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.108.19.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:88:45:d3:97:26:a1:75:f2:e0:02:a4:5c:e5:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 6 08:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:23:0c:9a:01:ae:ff:9d:d3:fe:32:50:80:
02:e6:c8:14:dd:24:d2:b4:e4:a3:87:41:e3:bd:52:
9a:8c:4d:ea:8b:57:12:8a:e6:b4:23:82:0b:44:2d:
f0:62:06:a1:63:98:7f:97:18:2a:75:5a:a6:f7:43:
42:99:95:b9:c0:47:38:68:91:8a:42:a9:33:5e:cb:
d1:c5:5a:f0:e0:1b:82:a6:57:6b:2d:f2:77:67:be:
58:12:29:af:8c:0f:49:d7:0e:54:4a:f5:1f:10:4f:
22:d0:17:bc:d0:f9:0f:c2:df:46:8b:33:99:ec:13:
64:9e:32:02:39:f5:6b:43:59:ef:ed:6d:40:5a:6b:
42:a6:20:c9:2d:ee:f3:fa:d3:d2:a5:41:c0:ba:01:
9a:56:93:a0:2d:12:20:b2:d6:bb:ac:2b:ac:67:2c:
98:2f:b5:fd:bd:57:81:f2:7c:e5:b3:a5:4d:35:da:
42:66:6f:f8:e0:08:d9:d0:77:cd:a4:e6:4d:09:c8:
89:b3:f1:64:3a:21:4c:ef:ed:a3:8c:db:2d:67:14:
3c:b2:68:8a:1f:93:89:45:61:95:03:6d:a7:75:5d:
3e:d4:c2:be:37:4e:ff:b1:12:65:56:3c:39:f9:1e:
5a:28:61:79:2d:69:90:09:3a:16:57:a7:03:42:22:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
02:99:a8:d0:33:91:c5:b1:77:8b:d8:88:c2:78:8e:af:2d:21:
c4:b3:74:58:1f:be:28:31:10:d3:9b:26:70:d4:f8:bf:9f:e0:
a6:a2:c5:3d:33:a9:f9:66:58:81:60:d3:17:cb:ce:e0:fd:ae:
81:dc:13:46:2c:2f:c1:94:c8:0a:8f:9e:1b:31:fa:80:f1:da:
71:24:8c:57:2b:f1:f2:97:d0:16:45:5e:7f:4b:ac:ac:0d:e1:
87:b1:68:e4:21:fb:ce:72:8a:11:0f:7d:d5:7d:fa:72:c8:d7:
78:26:cf:5e:e3:76:8c:f1:e1:1b:d6:e3:4a:dc:eb:05:12:5f:
2c:5f:18:bc:12:67:1a:f8:ea:63:f5:7e:41:47:5e:10:21:f7:
d8:15:be:c3:8b:dc:92:53:dc:d2:de:1f:33:b4:35:96:a3:aa:
70:cb:10:b1:1e:78:70:db:d8:45:73:92:fe:54:8a:c8:71:47:
ee:af:25:49:cf:39:9a:dd:ed:86:85:82:1c:28:ed:30:f5:92:
8c:1b:8f:3c:b2:54:a2:90:ba:ed:71:05:32:09:7a:8f:2a:41:
2b:84:43:98:9a:73:6e:37:d0:8f:63:6a:82:37:16:a1:f2:91:
88:7a:3e:9e:0a:9d:58:13:7b:a5:20:5e:39:86:f2:24:de:36:
f1:69:fe:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZMAiEXTlyahdfLgAqRc5dVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTA2MDgxMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTdkNTk0MzhjYzIwMWRjYTJmYzFjZTdhNjg3NzNiZDcxYmUwZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdkjDJoBrv+d0/4yUIAC5sgU3STS
tOSjh0HjvVKajE3qi1cSiua0I4ILRC3wYgahY5h/lxgqdVqm90NCmZW5wEc4aJGK
QqkzXsvRxVrw4BuCpldrLfJ3Z75YEimvjA9J1w5USvUfEE8i0Be80PkPwt9GizOZ
7BNknjICOfVrQ1nv7W1AWmtCpiDJLe7z+tPSpUHAugGaVpOgLRIgsta7rCusZyyY
L7X9vVeB8nzls6VNNdpCZm/44AjZ0HfNpOZNCciJs/FkOiFM7+2jjNstZxQ8smiK
H5OJRWGVA22ndV0+1MK+N07/sRJlVjw5+R5aKGF5LWmQCToWV6cDQiKm3QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFF9WUOMwgHcovwc56aHc71xvg6+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzUwZjVi
YS1iZGY0LTRhNzEtYTgzNi04YjMxZTIzMzgyZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNTBmNWJh
LWJkZjQtNGE3MS1hODM2LThiMzFlMjMzODJkYS8xL1VYMVpRNHpDQWR5aV9Cem5w
b2R6dlhHLURyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWwTMA0GCSqGSIb3DQEBCwUAA4IBAQACmajQ
M5HFsXeL2IjCeI6vLSHEs3RYH74oMRDTmyZw1Pi/n+CmosU9M6n5ZliBYNMXy87g
/a6B3BNGLC/BlMgKj54bMfqA8dpxJIxXK/Hyl9AWRV5/S6ysDeGHsWjkIfvOcooR
D33VffpyyNd4Js9e43aM8eEb1uNK3OsFEl8sXxi8Emca+Opj9X5BR14QIffYFb7D
i9ySU9zS3h8ztDWWo6pwyxCxHnhw29hFc5L+VIrIcUfuryVJzzma3e2GhYIcKO0w
9ZKMG488slSikLrtcQUyCXqPKkErhEOYmnNuN9CPY2qCNxah8pGIej6eCp1YE3ul
IF45hvIk3jbxaf4u
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:58 2024 by rpki-client on console-ams.rpki-client.org