Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer (raw, json)
Hash identifier: fF5TkEWjHFCnPMNV+buHMrutdBR6oT2ptDCCNw+FmrU=
Subject key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5E8E8E68A941968D42549B447A40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.76.124.0/24
IP: 194.55.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5e:8e:8e:68:a9:41:96:8d:42:54:9b:44:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:9f:11:48:1d:45:92:0d:5a:7e:d8:d9:02:
eb:8e:b9:8b:05:c5:49:77:0c:60:0a:fd:32:ac:c4:
2d:a3:6f:1c:0a:7b:69:15:db:94:cf:46:88:58:8a:
6a:c9:d0:9d:40:8b:58:df:51:4c:9c:1b:4e:2d:a3:
b1:d5:b0:33:00:32:06:f6:83:18:a1:88:d8:e1:91:
93:67:c0:9d:33:6a:a3:7a:35:71:7f:6f:47:45:75:
bb:88:d1:4c:66:78:ed:3d:e3:89:f8:a5:ec:20:c0:
52:92:8e:3e:d7:43:7c:41:33:15:f2:7f:03:c3:32:
68:72:c9:f2:e7:c9:14:8e:0a:d3:5c:1d:56:57:e9:
f5:b4:11:cb:0b:f1:e8:b6:cd:67:f0:00:65:2d:10:
54:f4:fc:35:83:90:0c:23:61:2f:6a:82:34:9d:06:
96:ae:52:fd:78:06:7a:6f:60:97:32:f4:31:eb:15:
03:80:a8:d7:34:4a:e8:d0:66:ee:91:7e:b6:a3:49:
01:5f:bc:bc:18:82:ca:1a:5e:ef:18:3a:1e:e6:14:
d8:60:7f:55:41:08:05:e1:12:7f:4c:05:3c:7c:fb:
32:d7:94:42:c4:dd:0f:78:48:98:02:b6:17:2f:c8:
cb:b9:03:1f:2b:b4:e3:cf:97:26:7b:92:32:de:ca:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.124.0/24
194.55.156.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2c:d1:24:3c:69:32:25:6e:11:0f:14:39:34:b4:68:a8:fc:
f3:ad:3f:92:ff:0d:72:34:82:6b:72:0f:58:e5:70:5a:44:4d:
08:74:9f:ce:55:92:62:ef:f0:28:ab:2c:a4:ab:a2:01:3e:e8:
bd:ac:2f:82:04:91:31:42:ee:77:c9:2d:05:f6:4c:98:65:83:
1e:c1:7d:a9:92:06:f7:d3:e2:45:21:28:ef:cc:cc:36:ac:79:
2b:a2:1f:06:29:42:42:12:91:a0:57:6a:89:0e:5a:7d:8f:59:
99:65:f2:b8:6c:72:fa:2d:b1:17:e5:56:4a:f3:0b:d0:ef:40:
92:17:bd:e5:19:9e:2b:08:86:cd:6d:b8:b4:57:57:ad:d0:6b:
c8:9a:13:a1:ec:33:44:f6:4d:8c:5e:f4:d7:42:6f:e9:5c:28:
67:c5:8d:9b:68:15:01:cb:c3:3f:0c:43:7c:21:c5:1d:7e:10:
4f:0f:35:aa:d5:47:14:57:31:6a:ba:e7:dd:28:2f:a0:d2:58:
64:c2:f7:01:97:66:f9:20:59:66:3a:4c:b4:f7:c0:4f:69:30:
fc:a2:fa:c1:d9:b6:bd:7c:59:51:08:d6:ea:41:f0:b4:d4:46:
fe:c0:26:03:c6:f3:4d:c7:fc:83:2a:42:15:38:85:0e:ca:63:
8b:fc:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:06:06 2024 by rpki-client on console-ams.rpki-client.org