Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
File: UlvgKcsyyovigKZJcDcY09iLtHU.cer (raw, json)
Hash identifier: NWxIy8wqDRNDu70eFBxnjwFwYdeSKIrN/z63vI606GI=
Subject key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521C5E4ECAE064D871BD4128D9A1649
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203583
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c5:e4:ec:ae:06:4d:87:1b:d4:12:8d:9a:16:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=525be029cb32ca8be280a649703718d3d88bb475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:34:0a:85:d0:00:94:53:69:d9:4f:42:cb:
4f:bb:9c:06:59:7e:55:41:2d:db:6c:0f:54:52:8b:
21:f9:36:48:14:e8:00:22:40:52:1c:f3:3f:3e:14:
12:18:8d:fd:fa:34:f5:bb:86:66:46:c7:ab:68:b0:
fa:f4:43:26:45:77:9e:94:07:32:57:65:bf:be:45:
1b:19:9f:16:84:58:61:eb:60:bf:7a:a5:6f:7d:3e:
95:c0:f7:cd:d1:7d:89:9a:66:02:6c:10:bb:d7:99:
30:d3:0b:c5:06:76:92:e1:bc:3c:e7:40:a2:89:b8:
7c:ff:03:4a:30:a2:53:6f:2f:3e:56:c2:50:1e:78:
6b:be:26:ef:fa:8a:b2:56:6d:a0:b9:ba:50:f8:82:
25:28:d9:aa:a7:1e:4e:74:0f:b6:53:84:d5:96:13:
7a:ce:c4:bd:72:76:7a:25:c4:db:e2:65:e4:5b:be:
56:ae:7b:89:9b:29:74:e4:f6:32:b7:81:a8:b1:f5:
8f:a7:bc:ff:03:b7:43:4b:c4:15:b1:44:4c:4a:ce:
da:27:69:17:ae:20:b3:15:66:69:d6:7e:36:da:d7:
f5:86:01:b3:89:9e:3e:47:38:9d:dc:23:cf:6a:22:
87:49:15:6e:53:c5:0f:c9:54:81:da:42:4a:4c:cd:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203583
Signature Algorithm: sha256WithRSAEncryption
16:09:aa:dc:46:24:7b:c6:6a:b5:36:8d:a9:91:ce:97:41:83:
7e:ec:cb:1e:34:26:8a:4f:80:06:76:3c:8f:79:89:35:64:e4:
a7:7f:ff:09:83:e9:dd:8e:08:95:61:28:2b:61:22:49:29:f1:
ff:36:d6:1f:7e:06:12:a7:f4:b5:71:a4:d3:55:f3:1a:9a:75:
5f:77:17:3f:4b:ce:05:08:aa:19:86:25:c4:4a:16:7a:3e:b8:
2c:48:d1:ef:be:03:3a:3a:c2:aa:3c:bf:d6:7a:f1:e9:63:25:
38:c6:c8:76:26:a4:ee:9c:a0:25:3d:bd:5a:44:5f:2c:89:58:
76:51:5b:76:d4:ab:8e:13:61:42:2b:90:25:e7:99:b6:52:e9:
29:6f:01:35:ef:41:10:a7:1f:ae:db:45:80:d0:98:37:bb:d6:
50:ab:65:3f:da:b2:da:0f:7a:04:f0:50:f6:4e:95:2a:4e:c5:
c4:5c:e5:05:5a:09:9d:6e:c1:9c:c5:07:ed:b2:91:5c:2f:68:
73:96:56:83:86:29:db:4c:2d:c5:fa:70:62:8a:a7:13:60:6b:
c7:9a:53:b6:46:3d:5b:9e:cb:97:ca:af:6c:d0:65:87:83:94:
13:42:72:17:c4:13:9f:e0:2e:64:80:48:69:36:34:f8:83:b0:
24:38:a9:44
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQlIcXk7K4GTYcb1BKNmhZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjViZTAyOWNiMzJjYThiZTI4MGE2NDk3MDM3MThkM2Q4OGJiNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR00CoXQAJRTadlPQstPu5wGWX5V
QS3bbA9UUosh+TZIFOgAIkBSHPM/PhQSGI39+jT1u4ZmRseraLD69EMmRXeelAcy
V2W/vkUbGZ8WhFhh62C/eqVvfT6VwPfN0X2JmmYCbBC715kw0wvFBnaS4bw850Ci
ibh8/wNKMKJTby8+VsJQHnhrvibv+oqyVm2gubpQ+IIlKNmqpx5OdA+2U4TVlhN6
zsS9cnZ6JcTb4mXkW75WrnuJmyl05PYyt4GosfWPp7z/A7dDS8QVsURMSs7aJ2kX
riCzFWZp1n422tf1hgGziZ4+Rzid3CPPaiKHSRVuU8UPyVSB2kJKTM2E0QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFJb4CnLMsqL4oCmSXA3GNPYi7R1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzA2NDc2
Yi0zY2IxLTQ1NWYtYmNkMy1kMWRiOTY0NzE3OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMDY0NzZi
LTNjYjEtNDU1Zi1iY2QzLWQxZGI5NjQ3MTc5YS8xL1VsdmdLY3N5eW92aWdLWkpj
RGNZMDlpTHRIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbPzANBgkqhkiG9w0BAQsFAAOCAQEAFgmq3EYke8Zq
tTaNqZHOl0GDfuzLHjQmik+ABnY8j3mJNWTkp3//CYPp3Y4IlWEoK2EiSSnx/zbW
H34GEqf0tXGk01XzGpp1X3cXP0vOBQiqGYYlxEoWej64LEjR774DOjrCqjy/1nrx
6WMlOMbIdiak7pygJT29WkRfLIlYdlFbdtSrjhNhQiuQJeeZtlLpKW8BNe9BEKcf
rttFgNCYN7vWUKtlP9qy2g96BPBQ9k6VKk7FxFzlBVoJnW7BnMUH7bKRXC9oc5ZW
g4Yp20wtxfpwYoqnE2Brx5pTtkY9W57Ll8qvbNBlh4OUE0JyF8QTn+AuZIBIaTY0
+IOwJDipRA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:25 2025 by rpki-client