Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
File: UkEeUtq30L4mdDE7a10udL0RNg4.cer (raw, json)
Hash identifier: FDLhdeZit/XaACmP2PJx/Mq/rCdFjqhWhVavRbDIEP4=
Subject key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9327E35DF3231D3D6E5AA8A4927CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.198.189.0/24
IP: 2a11:ffc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:7e:35:df:32:31:d3:d6:e5:aa:8a:49:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:c8:25:ad:05:5e:63:87:ae:ee:0c:cd:31:
6b:ed:db:50:c4:01:9b:17:9d:9e:1d:44:0e:13:6f:
cb:98:a8:40:dd:8a:f3:f7:a0:4f:73:d3:32:8a:26:
ca:ac:fb:17:83:b3:03:e4:9f:d6:6e:e1:b6:7e:6d:
45:46:ac:5c:d3:2e:90:c3:2d:b4:18:9d:7c:7b:eb:
4c:ff:9e:7f:e5:55:81:e7:94:05:f5:91:42:af:4f:
74:20:08:64:ed:98:16:08:35:a3:63:7f:8a:c6:7f:
ce:3b:3a:1a:b9:10:c3:9f:c7:d2:f2:92:6b:76:a8:
9d:d9:0e:e4:8f:ca:0d:24:5c:d9:e4:07:e3:c9:0b:
6c:72:df:19:c9:4d:c2:7f:89:29:fb:80:a8:0c:e8:
3f:a2:5b:cb:7e:13:5e:91:4f:85:e9:49:29:7c:99:
91:8b:87:2b:fb:92:7f:9d:c9:18:cc:c4:42:53:19:
ef:a9:62:08:69:8f:f7:7b:38:8b:c1:84:ed:19:ce:
46:e9:fa:5c:47:be:1c:05:fe:66:36:11:09:eb:6c:
6c:1c:03:87:29:ca:a4:f8:c4:33:c2:6e:3c:ae:70:
78:e4:eb:ac:ca:6b:9f:31:65:6d:52:80:1b:2b:28:
3a:8d:bb:7e:1a:38:ba:a9:e2:6e:00:12:a1:ab:dd:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.189.0/24
IPv6:
2a11:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:e1:4f:7e:22:a2:08:62:70:d6:51:3f:1e:db:ce:24:65:7f:
56:7a:86:0b:ed:ea:17:1f:7d:36:59:c2:08:0f:1b:b8:29:45:
a4:05:f1:08:09:d0:35:f7:ef:91:60:16:04:5e:07:44:9c:80:
9c:5a:35:f8:3c:66:47:68:ec:80:1e:f6:d1:61:00:af:15:4b:
db:6b:f4:11:59:7b:4a:9c:59:e7:6d:f1:11:02:be:7d:19:1d:
9d:1a:59:28:b9:f2:3c:c6:7a:2f:e1:6e:4b:99:8d:fd:83:52:
0c:30:0b:cd:b0:3a:a7:2a:77:1c:c6:7e:52:a0:9f:e7:56:28:
b2:5f:b5:41:1f:e2:7a:9e:95:f5:ad:fa:1c:bd:38:e7:21:3a:
9c:83:77:09:a3:46:b3:22:e9:19:79:1f:24:2b:1c:7c:b7:a9:
05:ae:42:59:fa:28:2f:ee:43:ec:1b:11:a6:35:a2:65:08:2f:
47:cb:94:ca:1a:33:94:df:04:db:7b:ca:a1:04:ec:80:2c:89:
3c:35:b5:1d:2c:14:cc:d1:da:27:fb:85:8d:c6:fc:bf:b3:11:
58:83:a7:04:c5:1a:4e:21:04:d0:a3:e4:2a:93:35:41:d6:f1:
53:44:35:fb:51:ce:b9:ee:d7:5a:cd:c2:de:48:0a:4e:90:a5:
04:30:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:47 2024 by rpki-client on console-ams.rpki-client.org