Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
File: UYqkmTdA34rTjZLMDBByNObfoFw.cer (raw, json)
Hash identifier: 5lmIv4nv55gy218t1H+5UOuWCqgz6B5eY3CCcD9Ckvo=
Subject key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424A0E8EA96240A0F3424A669EE09F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50017
IP: 185.161.128.0/22
IP: 2a07:c480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a0:e8:ea:96:24:0a:0f:34:24:a6:69:ee:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:be:85:65:78:ab:0d:e9:fc:fb:65:ae:a7:
06:9d:76:0a:ff:fb:ab:5a:84:c8:c0:17:4b:f1:cc:
6b:1c:7f:35:51:c1:87:24:ee:f7:90:c2:a2:2e:64:
e4:40:36:19:6b:79:b1:d7:f0:c5:82:18:7c:b2:78:
8a:6b:a3:a0:a2:7d:3b:91:ae:b3:73:ac:4f:cc:27:
05:1c:3a:d6:0c:34:28:e1:fa:46:69:30:81:fc:0b:
10:0e:17:49:05:69:94:88:ab:37:1d:05:6a:4c:3a:
fd:3e:0e:6e:90:a4:9d:05:e6:db:9d:97:a4:40:53:
e0:ad:3f:66:06:de:72:0d:b5:02:1c:42:44:7d:60:
d0:3f:9d:9c:bc:56:23:84:93:c2:3c:2c:08:5e:73:
da:ed:78:fc:20:b8:24:2b:65:03:5e:f0:90:7a:45:
b0:f8:71:78:e9:f7:72:74:c3:87:30:b5:5d:44:67:
4d:07:32:33:b5:df:9d:80:54:7a:c0:66:35:ad:33:
f9:95:ef:45:64:ed:e7:12:cc:27:a4:82:34:9d:2f:
87:ef:ee:e2:10:f7:d7:4c:dc:75:1f:dc:fa:f2:2d:
ef:41:06:89:37:6b:b8:5e:66:ad:3f:98:cc:9f:84:
99:cc:3b:e1:d1:78:3b:9f:3a:e5:b4:80:58:02:47:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.128.0/22
IPv6:
2a07:c480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50017
Signature Algorithm: sha256WithRSAEncryption
7e:7a:2d:ca:4d:04:87:5b:66:bd:5f:2c:3e:7f:da:f5:3e:1d:
d9:95:30:3e:36:58:f9:0c:b3:d6:86:6c:cc:c4:0b:7e:d2:69:
44:87:a9:e1:5b:66:76:69:8a:99:f5:c7:d9:b2:68:a3:8c:71:
59:7e:7c:4d:ac:42:b6:ed:f3:f7:ee:49:25:cd:c4:07:17:89:
7d:64:85:4c:4f:49:e6:ad:e7:9f:56:9d:c1:05:80:8b:a7:2e:
8d:99:ce:27:70:0f:23:67:90:0e:4b:37:d7:09:6f:4e:aa:f1:
33:19:2d:df:fa:92:ba:de:72:59:21:07:7e:4e:a1:d1:f4:92:
85:83:12:27:09:cf:a8:cc:0b:8a:28:db:4a:e0:38:4e:4c:ff:
c2:a2:68:a8:f4:af:b9:5b:ae:03:d0:a6:84:56:8e:9c:45:94:
95:40:e0:f8:e5:36:47:d7:37:97:a9:fd:65:ba:fe:41:9a:44:
3f:d5:85:67:a0:ab:d7:4c:f9:fe:47:3d:ae:20:15:32:78:3b:
c5:d4:8a:cc:27:ad:da:47:c5:0e:e4:91:b6:ab:ba:a5:c3:c7:
bb:f5:3b:c8:e4:d8:47:5a:c5:dc:2d:df:f1:90:47:d7:85:75:
d5:e8:4a:81:e4:15:fd:2d:c8:e0:4e:86:35:1f:92:8b:10:3f:
dc:b0:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:52 2024 by rpki-client on console-ams.rpki-client.org