Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
File: UeK-E5rnec09T-68zTaCgaH156A.cer (raw, json)
Hash identifier: wFHOk7HRWzKnjEibjHtNcnruiy+mvkG17/d6gUBV0Ts=
Subject key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF54ED75F7A5782D3385321D3917C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.184.0/22
IP: 2a02:7c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f5:4e:d7:5f:7a:57:82:d3:38:53:21:d3:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:3c:47:23:2a:67:e1:c9:ec:5b:a4:00:c0:
91:68:0d:26:74:8c:74:36:7a:6f:eb:83:49:f5:90:
33:f8:f4:35:94:a1:1b:53:9f:1a:98:a2:05:84:dd:
6b:91:04:20:5e:13:bd:c9:67:0d:2f:97:77:60:6c:
a9:9a:e7:42:2e:8d:55:2f:bc:b0:57:82:db:8d:48:
e0:a8:ca:a7:76:9e:3c:61:38:7a:22:aa:2d:02:e3:
10:4b:3b:cb:3e:3e:67:bf:3e:d1:45:62:23:d3:3c:
6f:b4:36:ba:bc:2a:50:c9:6b:d0:a8:22:5a:12:99:
54:75:5f:26:79:e1:e5:ac:65:61:e2:0b:75:24:9f:
bf:40:aa:ba:59:45:5b:78:e3:42:08:6b:49:84:c6:
40:23:3d:f9:ba:d7:98:04:58:43:f5:81:05:23:d0:
d2:8b:2d:db:fe:1c:64:57:8d:be:af:47:d9:d0:18:
7f:25:8f:b1:69:96:f4:74:f5:04:2c:38:74:62:a8:
1f:f4:67:d7:3e:02:7f:ad:65:1e:bd:fc:e8:49:46:
c1:99:bd:6d:6e:13:f3:9e:07:35:e5:2d:ab:9e:ea:
60:c7:cb:13:a4:77:31:c2:13:43:60:e4:c1:56:52:
29:e3:69:7d:e2:aa:27:c1:27:a4:04:dd:cc:08:1d:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.184.0/22
IPv6:
2a02:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
1d:50:55:f8:9a:8e:75:84:8f:14:7c:7b:21:4e:60:e3:eb:b6:
4c:a3:46:b7:d9:70:1b:ee:b7:e2:1f:db:0f:d0:63:80:80:58:
6f:46:1a:d7:d8:ec:d5:a2:e0:fb:8a:47:84:71:8b:76:15:c3:
36:85:5e:21:9f:d1:ab:57:46:3a:fc:41:1a:6e:83:0c:42:80:
ac:84:73:c5:53:8a:a4:ba:bb:c2:a6:ff:9a:2e:03:b4:55:62:
61:de:67:2e:78:39:a9:f2:7f:f9:34:da:bc:c8:16:ac:01:6a:
e5:ff:88:3d:40:9b:af:ce:b5:0e:2f:c2:e1:40:11:86:fe:fe:
89:52:a0:dc:6b:60:a6:a3:39:a3:12:a0:ad:6c:18:58:57:12:
fc:f7:cd:48:e6:b1:81:71:3f:cc:0a:d7:b6:9e:37:ed:16:26:
7b:65:6e:57:45:f2:94:cb:10:e2:db:ab:59:9b:80:5a:92:72:
f9:1c:f6:d4:cd:5f:0f:d1:6b:22:81:06:47:dc:40:2f:fb:5c:
56:bb:be:ec:ba:3b:ac:f4:8f:28:3b:1e:68:fc:d9:5e:95:e6:
62:3d:f3:ab:ed:52:08:bc:31:c2:38:25:b4:ae:e7:99:2a:b2:
47:97:e5:0c:14:22:e3:1c:a7:03:f4:6c:b3:53:35:c5:3c:c6:
7f:fc:91:a3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzF2/VO1196V4LTOFMh05F8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWUyYmUxMzlhZTc3OWNkM2Q0ZmVlYmNjZDM2ODI4MWExZjVlN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpY8RyMqZ+HJ7FukAMCRaA0mdIx0
Nnpv64NJ9ZAz+PQ1lKEbU58amKIFhN1rkQQgXhO9yWcNL5d3YGypmudCLo1VL7yw
V4LbjUjgqMqndp48YTh6IqotAuMQSzvLPj5nvz7RRWIj0zxvtDa6vCpQyWvQqCJa
EplUdV8meeHlrGVh4gt1JJ+/QKq6WUVbeONCCGtJhMZAIz35uteYBFhD9YEFI9DS
iy3b/hxkV42+r0fZ0Bh/JY+xaZb0dPUELDh0Yqgf9GfXPgJ/rWUevfzoSUbBmb1t
bhPzngc15S2rnupgx8sTpHcxwhNDYOTBVlIp42l94qonwSekBN3MCB31uwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFHivhOa53nNPU/uvM02goGh9eegMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzJmNTkz
MS0wNWE4LTQzNmItOTI3My1jZDdiNmVkYmZjZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMmY1OTMx
LTA1YTgtNDM2Yi05MjczLWNkN2I2ZWRiZmNmNS8xL1VlSy1FNXJuZWMwOVQtNjh6
VGFDZ2FIMTU2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQW4MA0EAgACMAcDBQAqAnxAMA0GCSqGSIb3
DQEBCwUAA4IBAQAdUFX4mo51hI8UfHshTmDj67ZMo0a32XAb7rfiH9sP0GOAgFhv
RhrX2OzVouD7ikeEcYt2FcM2hV4hn9GrV0Y6/EEaboMMQoCshHPFU4qkurvCpv+a
LgO0VWJh3mcueDmp8n/5NNq8yBasAWrl/4g9QJuvzrUOL8LhQBGG/v6JUqDca2Cm
ozmjEqCtbBhYVxL8981I5rGBcT/MCte2njftFiZ7ZW5XRfKUyxDi26tZm4BaknL5
HPbUzV8P0WsigQZH3EAv+1xWu77sujus9I8oOx5o/NleleZiPfOr7VIIvDHCOCW0
rueZKrJHl+UMFCLjHKcD9GyzUzXFPMZ//JGj
-----END CERTIFICATE-----
Generated at Fri May 3 03:01:57 2024 by rpki-client on console-fra.rpki-client.org