Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.cer (raw, json)
Hash identifier: fN1L57HuDsb2PT8PqHijTE/6FKXrCUjb+Kf7FpzsIkI=
Subject key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC189055E391DA84F0EDECF6D58F96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.226.226.0/24
IP: 2a0c:3c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:18:90:55:e3:91:da:84:f0:ed:ec:f6:d5:8f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53122e03a841b8878963affff695ca4f9fd0682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:22:55:0d:e6:7c:a8:bb:77:b4:ce:8c:b6:
a5:fd:f2:c8:ad:56:9c:59:66:13:68:e0:98:39:3c:
58:70:3a:6c:6a:d9:d4:44:3a:1d:73:3d:c6:9c:53:
7e:3d:a0:81:42:a4:fc:d7:36:98:de:04:a7:43:e3:
df:28:8c:68:74:0a:6f:56:d9:2d:e2:d6:cf:90:83:
34:82:41:99:a5:83:1f:cf:92:54:30:49:f2:4a:95:
7f:d4:be:a4:00:c5:a9:14:2c:24:17:26:62:56:0f:
10:37:96:7b:b6:e8:bd:2d:48:31:0c:cf:55:80:d9:
16:6a:3f:91:cc:f5:fb:51:b4:e9:1e:f2:ba:58:37:
9b:d3:3c:2d:39:bc:60:6a:f1:0a:7a:e4:b3:7e:c4:
11:aa:0d:22:bd:ba:67:05:9b:6f:0a:66:80:55:6d:
99:e1:db:f7:5d:87:2e:cb:b8:d2:21:82:f8:39:e8:
b0:7e:0c:27:33:a6:7a:8e:4c:cc:1d:0f:2c:04:90:
6f:dc:91:b4:f7:e2:ab:a1:56:22:a5:04:95:33:f3:
ce:59:ee:f2:f3:f8:c7:86:89:9d:1d:de:76:73:d5:
6a:9c:d4:26:ec:8e:67:c4:00:d7:74:9b:f3:ab:cd:
2e:94:fb:5a:5e:ba:a9:bb:f6:00:81:cd:b6:f2:4c:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.226.0/24
IPv6:
2a0c:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
19:44:05:18:b4:ec:46:8b:bf:e1:fe:c0:bf:86:00:d8:37:e0:
78:fc:b6:73:2c:c2:67:30:84:0e:63:0e:eb:1b:e6:9d:a0:0d:
f3:4f:aa:be:b5:cc:6c:fc:27:89:44:79:2b:ec:38:4d:48:51:
9c:bf:c0:de:bf:8a:ef:f2:d3:84:91:c3:d4:29:81:77:b4:79:
12:30:02:4b:12:7c:a0:b5:da:40:13:c4:1d:b9:79:8b:5d:11:
ac:6e:3c:a2:25:c0:f8:9f:5c:14:0f:ed:5e:03:a7:bc:0c:46:
25:f1:cd:7c:ce:7e:a2:16:d5:03:ff:a1:31:54:14:69:13:80:
71:39:96:78:e7:48:b8:f2:24:1a:78:df:97:89:5f:d1:1a:90:
c0:92:cf:ba:6d:79:27:b0:e0:07:fd:90:d9:30:9a:a5:f6:39:
95:62:ac:24:76:c3:f1:8d:87:92:70:ab:34:bb:2f:b5:47:e8:
ca:3a:db:28:5c:f7:ec:4f:de:73:74:64:d6:6c:9c:a8:60:6e:
0e:da:bb:de:86:6f:af:4c:05:02:a4:4a:c7:40:8b:16:4a:02:
43:45:93:ae:b2:9d:d7:8b:d3:26:9b:7b:ab:4a:50:c4:d3:47:
61:b1:a0:c7:43:71:61:e7:6a:18:d7:24:73:f8:51:09:02:80:
65:d6:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:37 2024 by rpki-client on console-ams.rpki-client.org