Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
File: UzYFdCt-Ei_Psq66n7ENb8pI544.cer (raw, json)
Hash identifier: KOnQ8UH6rhzWnAY4mvCVbOnc+h8ZTB3/OZZ0zA+sDLo=
Subject key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B722CE591C025E168F8BB34A200A09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.122.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:22:ce:59:1c:02:5e:16:8f:8b:b3:4a:20:0a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b6:dd:d9:5f:b7:a0:2e:43:0f:35:c7:44:
d9:6b:08:56:c7:72:e7:18:07:61:2c:1a:2e:e1:ee:
4d:2c:a1:58:2e:9d:c5:18:8c:28:24:7f:7a:3b:c6:
61:e2:a6:9c:86:7d:5a:ea:9b:27:74:31:04:ee:87:
16:7c:e4:ca:24:dc:64:5a:65:06:5c:77:36:9a:b8:
d5:72:fe:ba:82:2e:cb:d0:58:e5:b9:2f:84:4e:43:
9e:5a:66:29:0a:a6:53:66:7a:e5:34:f4:6f:08:ec:
54:f8:71:0f:18:c6:14:0e:c2:f4:e2:bd:21:32:da:
80:bb:d1:25:fa:a2:96:31:ec:e9:75:6f:17:1b:59:
61:ce:ea:2d:fc:63:e9:24:83:c4:92:0e:ae:c0:22:
80:65:2c:8d:fa:e7:7b:b1:da:f1:76:e3:88:7a:1b:
03:85:af:0f:83:e4:cf:03:d0:08:6c:da:90:0a:48:
45:5b:71:1e:d0:50:21:e3:3e:ff:1c:63:f6:d8:a4:
69:1e:98:ff:2b:31:dc:43:dd:39:12:0b:b0:a0:27:
41:fe:70:a5:a9:39:f0:35:73:78:98:da:7b:e7:e9:
4c:ac:2d:02:59:2d:63:57:c2:80:52:11:3c:b1:08:
b2:29:b9:e5:89:99:85:ed:cd:a7:15:80:72:7d:52:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:72:af:45:03:41:e0:89:03:70:d8:80:95:e3:75:b4:c9:90:
f8:06:a1:ed:b2:af:b7:db:47:d1:52:2d:a9:38:d2:87:ed:c4:
b1:3c:a7:8c:5c:ae:f3:7c:80:d5:b6:8d:e3:14:e0:c3:39:86:
0e:a4:c7:f4:66:21:c2:1f:bf:16:00:7d:63:6a:32:b2:58:9f:
8b:59:f4:20:2d:c3:a0:59:f8:2c:3f:fa:7a:70:5f:05:64:f6:
d1:0d:d5:c4:03:c5:d9:50:17:f0:27:a8:2d:92:85:db:fb:e9:
c0:45:ab:31:e5:6d:39:33:aa:ba:9d:8f:1b:88:5f:f8:85:a3:
10:a8:31:35:12:4e:ee:04:d8:41:24:87:86:8a:6b:29:f8:81:
8a:35:75:5a:66:50:35:c7:3b:24:9e:4d:31:07:fe:af:57:33:
e3:a9:98:da:94:e6:64:f2:34:38:e0:86:6c:d9:99:cf:89:68:
b0:92:51:74:54:9b:10:77:79:5b:2e:71:64:fc:4d:2e:f3:91:
53:2d:93:18:de:79:b5:a6:46:07:cd:a0:af:ed:91:0a:62:38:
ce:0c:d6:06:b0:da:0e:01:fe:5b:74:e7:7f:ee:59:78:59:ef:
7c:23:a0:46:83:68:6c:b7:5d:71:b8:2d:6a:03:3b:fc:0f:bb:
06:ea:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:18:08 2024 by rpki-client on console-fra.rpki-client.org