Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.cer (raw, json)
Hash identifier: OwlVRTfYR7C7W0QqVVqmxxFZUo5Z/tabsfX09Cck3To=
Subject key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7273B725BF479DE00D03C5AA51CA837
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.126.211.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3b:72:5b:f4:79:de:00:d0:3c:5a:a5:1c:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52386e520478e625be1d6282d216b05912f83874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:46:03:93:ed:75:db:98:0c:9a:d5:44:ae:
1b:7b:71:5e:2e:59:66:0e:a1:c9:a7:6d:46:b2:0d:
c8:1c:10:1b:7c:38:de:ae:bb:5a:c4:2c:2e:ea:01:
1c:9c:f0:37:c4:0b:b0:74:ee:76:42:ea:74:9f:11:
84:3a:85:e8:51:99:a6:96:a2:63:66:9d:af:24:55:
c4:6c:2f:70:e5:99:ba:f0:ab:6f:9b:52:d3:48:15:
4c:d3:73:c2:79:15:3a:60:7f:ae:0a:47:25:ea:d3:
b3:84:4e:ff:25:10:10:6c:dd:b7:55:c0:0e:8d:f0:
65:67:6d:f2:d2:7f:38:9d:a4:e2:f9:92:ae:eb:5c:
2d:f8:f0:8f:06:90:a9:a8:6b:d0:92:69:1f:9b:1f:
fd:ed:9f:5f:a2:52:8a:7b:05:68:62:77:f2:11:98:
bc:4c:78:76:6b:36:cc:67:59:48:df:a6:a8:09:33:
fa:ce:d0:59:2c:92:8e:eb:d1:3a:de:ad:c7:fe:25:
a3:d7:54:56:c4:d1:bb:6c:57:e4:de:76:ff:22:ac:
10:fc:d7:19:57:e5:81:3a:15:89:b2:a6:63:16:ae:
2f:bf:95:cb:db:c2:5f:3b:ac:f1:86:c6:0a:cf:1e:
df:92:84:a9:b0:a9:b9:5b:2f:de:ee:7c:04:a4:ab:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2c:49:bd:87:84:fd:42:68:77:88:36:99:77:83:84:aa:f8:
30:e1:a2:ec:2f:7e:a1:ad:3b:d3:a2:a4:b2:c2:11:14:43:d9:
12:40:15:f6:ff:9b:48:1d:6a:ae:5b:77:0a:ca:dd:88:94:67:
14:91:ce:4c:53:a6:f9:64:e1:e7:10:76:4f:75:c0:fa:dc:e6:
90:2d:e4:c7:a1:3c:49:bc:6b:9a:48:d3:b0:82:7a:86:83:c6:
40:82:70:34:94:06:cd:c1:88:45:ee:42:3b:54:3e:3a:7e:c0:
8e:dd:87:35:b5:e7:6b:b0:b6:58:6d:17:81:80:97:1b:4f:00:
26:c0:7b:fb:2a:d8:9c:18:39:62:54:52:96:06:91:a0:b1:a7:
d4:40:5d:3b:8b:e6:89:fa:32:48:64:98:78:ed:09:5e:e3:47:
01:db:8a:2a:a2:a8:bf:cb:68:60:be:3f:16:72:c1:f9:f5:4d:
31:3f:96:2a:f4:dd:c4:d1:5e:fd:02:51:92:99:24:67:79:4c:
cd:8b:5d:84:38:d1:05:b6:c4:a3:a8:f3:ee:6f:43:f2:d0:1e:
46:7f:0d:a5:d5:7f:3b:fb:11:4d:d4:00:a2:eb:80:5b:2a:ba:
3d:e0:e4:54:4f:cf:7d:a4:89:2b:10:a3:66:67:00:0f:cb:ab:
32:a8:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:43 2024 by rpki-client on console-fra.rpki-client.org