Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer (raw, json)
Hash identifier: P4IVQEcEgFpOF/tek0G1ZDQYwRFzlUPFCwo9PW7MvgM=
Subject key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABDF0B357C3341EDDC182C40E99F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.90.180.0/22
IP: 2a05:e340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bd:f0:b3:57:c3:34:1e:dd:c1:82:c4:0e:99:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:7e:39:82:74:16:d8:79:a0:e4:a6:b0:c3:
c1:29:82:39:b9:58:4b:7f:8f:1c:ed:d7:2d:1a:1a:
46:ad:c8:c1:f3:cf:0e:e5:43:bf:53:6a:29:80:53:
f0:86:a9:7c:e3:cc:88:9f:c9:ff:9a:aa:40:41:20:
52:bb:0a:15:a2:0f:ca:8a:1d:56:5f:98:d2:43:ec:
97:e9:d5:05:5f:28:d6:d3:60:b2:33:45:eb:6e:ca:
c3:c9:d4:d7:80:60:90:65:bc:76:00:ae:9a:70:82:
20:9d:1e:e3:99:c5:55:8f:cc:4a:81:81:78:cc:5e:
68:26:78:c9:16:75:c1:df:b6:5c:7b:55:53:b6:9c:
0f:ff:d0:05:36:59:55:1f:e4:52:6b:f7:f7:00:25:
79:47:b5:71:8c:de:5d:fb:39:a8:73:11:87:9b:89:
76:bc:b9:0e:b2:42:b5:2e:e9:37:36:fd:2c:fa:2f:
b0:b8:81:88:dd:ae:6d:9c:92:b9:ae:11:46:67:c9:
01:ac:1a:04:3c:05:91:5c:97:91:a4:e5:dd:3a:bf:
4c:d9:05:98:74:6b:e4:8d:aa:bd:da:59:d1:e5:f9:
2a:02:56:b9:82:99:0b:b1:a8:41:44:c4:7c:70:79:
b6:fe:82:b0:40:1c:f8:c2:24:3c:c8:74:b0:65:78:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.180.0/22
IPv6:
2a05:e340::/29
Signature Algorithm: sha256WithRSAEncryption
0e:2d:d4:ed:23:78:3e:33:8e:45:0d:c0:42:47:fb:00:e8:f3:
e5:44:6f:8f:af:45:16:8a:c6:63:7b:f9:51:6e:bc:cf:36:c1:
e5:f2:3f:90:a5:f8:fb:a5:db:e3:47:e3:74:a6:df:2b:f3:c4:
4d:42:90:b5:95:d9:1f:9f:d6:44:18:f2:0d:49:96:26:58:5f:
f3:b2:55:cf:3c:cf:15:3d:62:50:2a:b8:a7:f1:c5:a5:2d:c9:
b3:ee:93:c2:56:37:81:d4:c9:f8:74:bb:47:9e:24:52:48:51:
22:52:a2:d5:6b:4e:d4:dc:02:a7:f6:b0:2f:5d:d4:4d:fb:b0:
31:11:ef:0e:fc:64:a4:b3:cc:ff:91:57:fe:d5:42:7c:ed:d7:
8e:7c:ca:db:d7:6f:a3:8a:53:4f:3b:5f:a7:3d:93:f2:5e:62:
5a:21:d3:1b:72:6d:04:3a:fb:5a:a4:8e:54:c1:9d:a2:8d:f3:
52:15:ab:59:6e:44:b0:05:4a:37:d8:73:22:6c:c0:f5:ad:13:
13:65:99:5f:b8:85:74:c4:c2:7c:1b:21:ee:37:30:14:15:a0:
fb:e8:94:7c:ff:03:51:ee:3d:9a:c9:cb:53:b5:46:ab:92:03:
d0:2b:5f:5b:96:32:a1:5e:5c:0b:ce:93:bc:d8:84:21:72:ec:
20:6f:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:57 2024 by rpki-client on console-ams.rpki-client.org