Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.cer (raw, json)
Hash identifier: ibgHMR0zuF6Stx5lLNwVAav75oR999kly2rKq4NAGDA=
Subject key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56F0553DE97A82AE4D96BC6C7B2526C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208232
IP: 2001:67c:1334::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:05:53:de:97:a8:2a:e4:d9:6b:c6:c7:b2:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:a3:f6:76:2d:b2:4c:00:38:20:50:d7:df:
30:62:44:6e:76:a3:1d:ee:4b:ca:87:68:ea:46:ce:
e7:98:c3:66:e2:b0:e2:97:7d:06:e4:f7:62:04:53:
70:2f:7a:df:39:69:1d:ea:25:87:fb:f0:9e:80:30:
db:fc:7c:2c:41:84:84:86:f3:26:bb:eb:48:6a:5b:
89:70:1c:4d:90:27:d4:8b:9e:eb:3c:8c:dd:64:c4:
b6:8a:b3:82:51:a1:af:b9:7b:66:ad:1c:f6:01:9b:
3f:10:c0:cf:11:72:95:8b:39:69:53:cc:4c:e1:54:
4e:5e:7a:8a:8e:d1:ad:d6:b3:83:f4:f9:bc:cb:c9:
21:8d:b8:a0:ef:b3:c9:c5:17:72:fc:fe:f6:5a:a5:
d1:87:98:b0:e9:4f:53:41:10:6c:58:57:6e:17:ce:
18:e4:2f:51:22:45:a7:5c:a4:7c:51:c4:5a:ca:7d:
dd:52:a9:9c:9d:1c:ac:d7:7a:7e:0d:1f:7c:f3:b4:
53:3b:5d:7e:09:38:86:dc:3b:9d:fd:5f:89:b3:6c:
8f:7c:6c:93:b3:48:b7:77:97:49:52:06:23:4f:4e:
0b:ae:2f:15:15:4d:ba:98:bf:59:d9:98:66:ca:76:
f4:7e:35:7a:62:ad:e0:cb:11:5f:88:c5:ba:d8:c9:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1334::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208232
Signature Algorithm: sha256WithRSAEncryption
79:5b:ba:fa:55:b3:54:53:69:b8:05:05:8c:f5:2f:04:4b:55:
6e:80:ad:d4:d6:df:5b:9a:7c:36:8f:42:bf:fc:eb:07:b0:db:
c7:5a:e5:5a:32:aa:af:6c:c5:d7:11:5d:8e:25:15:31:a8:5d:
26:c7:a9:d0:35:3b:e4:65:60:02:d1:bd:ac:19:d7:b6:3e:2c:
d3:96:b7:6d:e4:d3:d9:19:89:74:d6:32:b4:ea:74:67:9a:b9:
84:93:0a:ab:9d:8f:e4:3f:b2:5a:32:cd:84:95:ce:80:ff:7e:
c8:e1:bc:15:d6:19:af:c5:b5:28:9e:0d:b4:ba:e3:22:1c:08:
d9:04:38:96:28:fe:38:cc:d9:31:3f:ab:88:c4:68:85:0a:69:
12:62:b6:4c:c5:eb:1e:b2:5e:4a:52:e5:05:25:ae:b5:c1:0e:
f2:92:27:d4:ac:41:ac:ea:a2:cd:88:30:af:ed:b9:dc:52:b3:
75:39:17:8f:28:d5:4d:6d:6a:9e:b8:f9:3c:7b:e5:1d:34:19:
cf:da:0d:c2:4c:1c:be:5f:b1:f7:c3:82:da:60:84:ec:dc:ef:
3a:f5:82:82:a0:ee:af:42:18:2f:80:8c:b5:25:7f:cd:f4:95:
e7:7a:74:bf:82:12:fd:51:77:a5:bf:f9:30:61:91:9d:fb:6b:
e6:ab:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:46 2024 by rpki-client on console-fra.rpki-client.org