Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
File: uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer (raw, json)
Hash identifier: 0PNtsmCc6FUE3xzlv8YptzsbZxid0f/ex2rP0O5v5ho=
Subject key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A4CB2F9D0945D367D940CA9A48A02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.133.208.0/22
IP: 185.197.132.0/22
IP: 2a06:e880::/29
IP: 2a0a:79c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4c:b2:f9:d0:94:5d:36:7d:94:0c:a9:a4:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:47:18:f5:f5:7f:42:0b:c1:04:a4:64:23:
37:47:8f:89:11:c2:ce:15:59:71:99:0e:2c:96:ff:
16:b8:58:2a:20:7f:72:f3:1c:83:10:0a:e7:b6:d9:
ca:5b:32:c8:a5:b1:c0:d6:15:fa:d6:20:e4:95:2f:
66:88:38:35:91:ed:77:de:d3:f9:70:c5:9e:28:57:
67:9a:72:73:2a:d9:5d:00:a3:c9:4e:44:7a:ab:68:
a8:87:28:ca:bd:3e:ab:97:d1:42:dc:6f:d2:41:80:
a1:cb:80:67:3e:f0:47:62:1e:b8:21:64:18:1f:d1:
3c:52:c7:a6:98:8b:1e:f8:78:08:8b:9b:c7:a0:fa:
70:f9:5f:58:1f:ef:3b:e4:3f:44:f6:0d:b7:93:94:
bf:64:26:db:40:3f:9c:d6:ce:ee:5c:37:8b:94:66:
21:3c:71:5c:ef:a9:02:e7:d3:86:24:7c:9b:80:19:
41:c7:a0:2d:62:b2:02:19:3f:2b:c2:2b:f0:8e:55:
38:f4:32:f4:9d:9f:75:fa:f7:b7:3d:95:c4:4d:b1:
a0:21:ce:1d:92:45:ec:c4:8d:84:6e:63:af:12:97:
1a:cf:3d:90:66:f1:33:ef:51:9c:93:9d:d7:99:c6:
75:a8:aa:62:8d:d0:ef:56:b4:29:de:fd:3c:96:36:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/22
185.197.132.0/22
IPv6:
2a06:e880::/29
2a0a:79c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:a4:d1:f3:c6:11:54:48:b3:8b:91:a6:3e:0f:fc:63:89:a3:
53:81:dc:f5:3e:be:f3:d8:44:5e:5b:88:d6:5a:79:6c:a9:1c:
c8:67:76:89:7f:9a:ae:54:b9:f6:0a:9a:60:f9:3e:c4:36:fc:
35:3b:87:a8:36:cc:23:b7:0e:fc:d1:23:3d:15:67:02:b3:a7:
52:80:12:9f:75:72:cd:e1:4d:7d:c6:50:14:72:d7:b7:69:f7:
3f:3c:a1:22:20:05:ee:2a:67:1a:8c:57:60:93:8d:41:4e:1e:
ec:7c:5b:84:b1:ca:ac:9e:e3:c5:e7:54:f8:ec:ad:ea:91:96:
1c:76:d3:2e:65:3c:56:b8:26:08:a2:86:b7:d5:49:3c:f7:bc:
4d:3d:eb:17:9b:6e:5d:2a:47:1e:c7:bb:89:db:74:c0:25:9f:
b3:41:09:f2:c8:ff:72:da:23:21:1c:3e:9b:0d:91:65:ce:52:
7e:c9:16:a6:ac:c9:78:14:91:e4:21:be:db:d2:41:67:8e:92:
09:a9:cb:54:f1:ad:40:d7:50:e3:3a:2e:7c:2e:b1:af:56:7f:
5b:e4:b0:2e:61:09:d1:aa:70:a0:cd:1e:c7:36:48:44:d8:fb:
28:a6:83:6d:6d:66:16:70:5a:32:70:74:8e:71:86:0e:de:57:
56:8b:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:27:06 2024 by rpki-client on console-ams.rpki-client.org