Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
File: UlvgKcsyyovigKZJcDcY09iLtHU.cer (raw, json)
Hash identifier: n4hpANK9auWNPVBw5r1Ggu1esLXt8tpDWMB9kPe5t9Y=
Subject key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA7920E3750DAA767BB3CAD84758FFD7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Feb 2024 12:23:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203583
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:92:0e:37:50:da:a7:67:bb:3c:ad:84:75:8f:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 12:23:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=525be029cb32ca8be280a649703718d3d88bb475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:34:0a:85:d0:00:94:53:69:d9:4f:42:cb:
4f:bb:9c:06:59:7e:55:41:2d:db:6c:0f:54:52:8b:
21:f9:36:48:14:e8:00:22:40:52:1c:f3:3f:3e:14:
12:18:8d:fd:fa:34:f5:bb:86:66:46:c7:ab:68:b0:
fa:f4:43:26:45:77:9e:94:07:32:57:65:bf:be:45:
1b:19:9f:16:84:58:61:eb:60:bf:7a:a5:6f:7d:3e:
95:c0:f7:cd:d1:7d:89:9a:66:02:6c:10:bb:d7:99:
30:d3:0b:c5:06:76:92:e1:bc:3c:e7:40:a2:89:b8:
7c:ff:03:4a:30:a2:53:6f:2f:3e:56:c2:50:1e:78:
6b:be:26:ef:fa:8a:b2:56:6d:a0:b9:ba:50:f8:82:
25:28:d9:aa:a7:1e:4e:74:0f:b6:53:84:d5:96:13:
7a:ce:c4:bd:72:76:7a:25:c4:db:e2:65:e4:5b:be:
56:ae:7b:89:9b:29:74:e4:f6:32:b7:81:a8:b1:f5:
8f:a7:bc:ff:03:b7:43:4b:c4:15:b1:44:4c:4a:ce:
da:27:69:17:ae:20:b3:15:66:69:d6:7e:36:da:d7:
f5:86:01:b3:89:9e:3e:47:38:9d:dc:23:cf:6a:22:
87:49:15:6e:53:c5:0f:c9:54:81:da:42:4a:4c:cd:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203583
Signature Algorithm: sha256WithRSAEncryption
57:1a:40:75:0e:36:63:92:4c:80:40:7e:f8:58:0b:a2:7d:38:
72:66:c6:ff:a9:81:ff:8e:11:69:93:93:c3:1e:d7:a8:32:29:
cd:28:fb:b2:66:d8:ff:88:0b:e8:1f:79:7d:1b:25:c0:da:74:
14:cf:ba:e4:a9:bf:60:05:4e:95:64:16:e6:eb:10:25:30:b9:
a0:90:cf:9d:6a:93:14:e8:48:9d:ba:af:5b:af:87:68:eb:29:
a4:07:58:d6:42:c1:39:84:83:c0:b8:32:70:f1:31:98:58:d1:
7c:50:61:3d:00:c6:0a:90:10:10:91:7f:86:5b:89:a8:81:c0:
ec:d5:00:3b:16:ad:6c:06:53:71:7f:e2:df:72:0c:18:54:22:
e4:76:59:db:4f:5c:56:64:39:78:36:76:30:fc:7f:06:64:3d:
49:70:4c:33:cd:bc:c5:d1:a6:45:20:cf:6b:ee:99:95:03:35:
89:97:28:45:a7:3b:00:f1:49:e6:04:ce:3f:31:24:86:f3:65:
78:b7:22:ca:d7:88:52:bb:62:0c:f2:45:e7:e4:54:83:03:9a:
aa:59:97:89:a9:b7:56:34:c2:5a:01:21:60:a2:fb:51:9b:69:
34:61:77:ec:e7:f2:87:20:aa:57:df:26:c3:1e:2a:3a:72:be:
df:53:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:17:54 2024 by rpki-client on console-fra.rpki-client.org