Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
File: UzYFdCt-Ei_Psq66n7ENb8pI544.cer (raw, json)
Hash identifier: +p9c9SqIYKZSJcddF4cei+C1LmKbRfZRvHbnvUmO5lY=
Subject key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCBF5C4EB24E5C0724875CBF6385F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.122.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cb:f5:c4:eb:24:e5:c0:72:48:75:cb:f6:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b6:dd:d9:5f:b7:a0:2e:43:0f:35:c7:44:
d9:6b:08:56:c7:72:e7:18:07:61:2c:1a:2e:e1:ee:
4d:2c:a1:58:2e:9d:c5:18:8c:28:24:7f:7a:3b:c6:
61:e2:a6:9c:86:7d:5a:ea:9b:27:74:31:04:ee:87:
16:7c:e4:ca:24:dc:64:5a:65:06:5c:77:36:9a:b8:
d5:72:fe:ba:82:2e:cb:d0:58:e5:b9:2f:84:4e:43:
9e:5a:66:29:0a:a6:53:66:7a:e5:34:f4:6f:08:ec:
54:f8:71:0f:18:c6:14:0e:c2:f4:e2:bd:21:32:da:
80:bb:d1:25:fa:a2:96:31:ec:e9:75:6f:17:1b:59:
61:ce:ea:2d:fc:63:e9:24:83:c4:92:0e:ae:c0:22:
80:65:2c:8d:fa:e7:7b:b1:da:f1:76:e3:88:7a:1b:
03:85:af:0f:83:e4:cf:03:d0:08:6c:da:90:0a:48:
45:5b:71:1e:d0:50:21:e3:3e:ff:1c:63:f6:d8:a4:
69:1e:98:ff:2b:31:dc:43:dd:39:12:0b:b0:a0:27:
41:fe:70:a5:a9:39:f0:35:73:78:98:da:7b:e7:e9:
4c:ac:2d:02:59:2d:63:57:c2:80:52:11:3c:b1:08:
b2:29:b9:e5:89:99:85:ed:cd:a7:15:80:72:7d:52:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:22:f0:88:c3:82:24:27:5a:c8:ff:39:d1:23:d9:ba:59:bd:
d7:3a:b9:f7:06:79:21:6c:10:64:b8:09:57:d9:c9:26:c7:7b:
3e:98:da:69:bb:38:ab:0c:e0:7a:b9:57:48:39:56:1a:9d:35:
59:70:0a:97:89:e8:ec:b2:31:aa:17:14:77:b3:89:a9:e9:e9:
c3:5a:90:f4:f6:90:33:cc:93:7a:cd:d2:b7:c2:79:88:14:4d:
22:7c:3d:d0:89:3f:0d:8e:f9:65:f1:e5:12:ec:be:f1:47:10:
6d:e7:b0:c6:b6:a2:16:f7:80:97:7f:d4:cc:01:c6:82:52:40:
b8:da:2d:42:9e:65:7d:36:93:60:3d:8c:cf:45:b3:ce:9d:d1:
e5:37:03:5e:89:02:d0:6f:46:28:70:c4:1c:e7:2a:89:98:3c:
62:f4:3b:68:9e:32:e4:76:9c:df:16:ec:58:27:dc:fb:90:87:
ba:66:61:ce:a5:6f:81:ef:2d:89:72:2f:f5:f7:76:53:dc:64:
10:45:e3:a0:8b:2f:cd:a1:23:60:ec:1b:81:02:9e:3b:80:f4:
9e:71:d5:85:de:6b:07:5d:62:a7:6c:d2:d0:7f:78:85:a9:50:
77:88:63:cc:b8:54:16:bb:fa:d1:b0:12:4f:04:56:05:14:c4:
46:2b:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:19 2025 by rpki-client