Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
File: UxR_m8-R0qz49DW6ULgFBUXNH48.cer (raw, json)
Hash identifier: pT56+FY2wrmxOP3c4jLCIA0Zd+y0vNvRULMGfw0+XJw=
Subject key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01945206FDFF64E6B8FD13D3C6E1B315FCFB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Jan 2025 21:02:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.19.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:52:06:fd:ff:64:e6:b8:fd:13:d3:c6:e1:b3:15:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 21:02:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:a5:89:b8:b9:e5:ee:2a:f8:f0:a5:ae:ed:
5b:dc:fb:aa:44:ce:9b:e6:83:e7:c2:96:61:e5:1c:
94:ec:79:c4:7d:ea:0c:57:6c:64:6b:85:08:6f:49:
4f:b3:5b:11:01:0c:c4:42:07:ab:b8:65:18:af:63:
53:0f:db:8c:9d:3d:49:de:5a:f9:25:b0:d7:f1:93:
15:2e:c5:3c:1f:a1:24:e7:f1:d5:c8:87:40:0a:85:
24:39:af:a0:9d:a3:f8:69:01:b4:ac:65:2b:b7:95:
b7:62:99:2a:b8:f1:b8:ef:41:79:cc:a3:88:58:1c:
c3:9f:ad:bf:47:2a:2b:a5:78:d7:40:b4:87:2c:a2:
ec:98:bf:4f:f0:99:a9:82:67:7f:6f:96:4d:a8:7b:
13:e5:48:ca:c8:6e:33:1c:ee:8d:ac:6f:eb:49:32:
b1:97:47:02:33:25:c7:7a:3d:17:01:4f:16:b4:c3:
d2:1d:89:3b:68:02:47:ad:24:4d:b2:f2:09:44:9d:
72:22:e8:d1:dd:62:5a:4a:61:b6:59:6d:42:55:d5:
4c:f4:9f:68:53:9f:e6:ae:f1:e0:f6:f6:96:85:c1:
51:fe:7f:50:59:71:5b:5d:05:44:b6:ee:e3:d2:c7:
08:66:19:51:24:41:00:e7:06:ee:ef:df:6d:85:5a:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.33.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4c:19:54:27:a9:18:b4:c1:72:fd:dc:c8:03:ab:81:50:3c:
f7:13:a0:73:f1:a1:3d:03:92:89:8a:88:09:24:60:1b:6b:d0:
c3:7d:7c:d8:d9:f2:5f:d4:eb:a8:7f:cf:53:c5:5e:a2:e0:92:
5b:c1:80:4d:06:c1:a3:1d:c8:e7:4f:16:0e:c6:aa:e3:79:86:
fd:cd:01:73:1c:a9:83:a0:60:42:ab:29:92:28:a4:a3:83:0d:
5f:f0:6d:3f:f3:52:f8:3a:01:5c:8d:43:ab:a2:25:a9:63:b8:
47:63:ea:cb:06:52:79:e4:d7:a7:09:1c:76:32:0d:ee:68:b2:
71:1c:79:33:a1:84:bb:c8:dd:18:eb:83:be:1d:0a:35:96:b1:
78:dc:24:a0:7b:35:d7:cc:32:6a:aa:36:73:fc:ab:a5:7c:de:
7a:ac:67:d0:55:51:56:50:43:72:50:75:78:46:5f:51:8a:cd:
c0:42:a0:1c:1a:ba:1b:14:b6:d4:e0:bd:61:44:fc:6c:54:e3:
46:49:ca:e5:d1:73:43:a2:4f:37:6c:08:86:23:ad:4a:c0:95:
b1:c0:76:6a:05:67:f3:7b:83:0d:c5:53:89:54:c9:ed:74:16:
7e:af:a3:15:28:f1:ab:71:db:91:9c:4f:ad:37:ae:16:25:c9:
6e:d5:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:53 2025 by rpki-client