Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer (raw, json)
Hash identifier: uqTMY1VOKBAhsgrJyomHPGXEv4D6PWqDdAcohsBJug0=
Subject key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214443014CDB48BDF1E13F81307F5F6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.76.124.0/24
IP: 194.55.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:01:4c:db:48:bd:f1:e1:3f:81:30:7f:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:9f:11:48:1d:45:92:0d:5a:7e:d8:d9:02:
eb:8e:b9:8b:05:c5:49:77:0c:60:0a:fd:32:ac:c4:
2d:a3:6f:1c:0a:7b:69:15:db:94:cf:46:88:58:8a:
6a:c9:d0:9d:40:8b:58:df:51:4c:9c:1b:4e:2d:a3:
b1:d5:b0:33:00:32:06:f6:83:18:a1:88:d8:e1:91:
93:67:c0:9d:33:6a:a3:7a:35:71:7f:6f:47:45:75:
bb:88:d1:4c:66:78:ed:3d:e3:89:f8:a5:ec:20:c0:
52:92:8e:3e:d7:43:7c:41:33:15:f2:7f:03:c3:32:
68:72:c9:f2:e7:c9:14:8e:0a:d3:5c:1d:56:57:e9:
f5:b4:11:cb:0b:f1:e8:b6:cd:67:f0:00:65:2d:10:
54:f4:fc:35:83:90:0c:23:61:2f:6a:82:34:9d:06:
96:ae:52:fd:78:06:7a:6f:60:97:32:f4:31:eb:15:
03:80:a8:d7:34:4a:e8:d0:66:ee:91:7e:b6:a3:49:
01:5f:bc:bc:18:82:ca:1a:5e:ef:18:3a:1e:e6:14:
d8:60:7f:55:41:08:05:e1:12:7f:4c:05:3c:7c:fb:
32:d7:94:42:c4:dd:0f:78:48:98:02:b6:17:2f:c8:
cb:b9:03:1f:2b:b4:e3:cf:97:26:7b:92:32:de:ca:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.124.0/24
194.55.156.0/24
Signature Algorithm: sha256WithRSAEncryption
20:db:b5:e6:8e:1d:b1:22:81:7a:07:07:f1:a2:52:d0:12:c8:
87:21:e7:84:dc:17:1a:be:07:7f:12:e8:90:31:af:b0:62:d0:
38:c4:62:7a:1d:e7:ea:99:69:b8:93:c3:d4:ca:3f:52:1c:08:
e4:ca:f2:57:8c:da:cc:72:4c:1f:a5:8c:90:69:c3:2c:c0:74:
f5:e8:5c:c7:af:f1:9d:2e:ba:88:2a:4a:be:54:67:df:17:ca:
57:b1:7b:fd:3f:c9:75:02:58:7a:b5:00:c0:d8:94:9d:37:48:
51:c8:0f:f5:e1:ec:cb:ce:b0:a9:de:2e:62:1c:9a:65:a9:3c:
2b:82:47:5a:c6:66:e0:c6:4a:29:fc:ab:21:29:4e:d1:77:43:
b8:f7:7c:47:93:6c:33:a1:7e:d5:a4:85:1c:d1:88:47:50:3a:
12:b9:3e:a8:79:ec:c4:ae:01:b6:7b:22:c2:a1:22:91:8a:c3:
04:a5:4e:ae:56:06:38:5e:8a:1c:2b:1c:a9:82:af:41:f4:c2:
c8:eb:1c:09:32:4e:95:27:d5:c0:e0:e6:36:d4:4a:5f:7b:0f:
a9:78:92:7a:c0:57:7a:29:54:eb:bf:38:12:fa:5f:7e:34:d3:
21:fa:6f:0e:7e:79:0c:05:74:da:59:6f:13:c1:66:9f:a4:ce:
1d:4e:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:48 2025 by rpki-client