Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
File: uNJRxL_VJtoGLUzir1a25G6SURc.cer (raw, json)
Hash identifier: LzO5Iv3g3SPp8karybBrHURJwLl5YNp8moCUxyDIToo=
Subject key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79473CFEE43B8693CBAE18F31C8ADE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 132.74.0.0/15
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:73:cf:ee:43:b8:69:3c:ba:e1:8f:31:c8:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:ad:70:0b:f3:cf:13:75:70:88:22:25:35:
55:43:85:95:75:60:69:96:13:dd:0f:79:22:35:ca:
3e:f0:dc:7e:89:27:be:6b:3a:61:fe:ef:6e:71:63:
b4:a4:7d:ae:32:b2:31:f8:6a:ef:18:bc:3e:70:fb:
63:a4:22:e4:cd:a0:56:13:29:ce:7a:71:f6:f8:1e:
f6:f7:c4:f7:8d:75:d5:9b:7d:f7:87:57:68:cc:01:
2f:59:a2:7f:30:f0:fa:87:21:de:bc:68:9e:f3:14:
a7:5a:41:21:5e:30:1d:e1:f6:48:4e:4f:98:cc:23:
14:7f:53:42:68:ff:9b:db:6c:17:bd:12:c6:18:21:
d4:9f:88:ab:5b:7a:2f:c8:fd:a8:96:c1:10:83:35:
19:f7:e9:ff:81:03:3f:76:3e:78:3d:6d:69:b5:4c:
9e:88:e5:07:d8:af:97:d9:5c:c0:46:c9:fc:14:78:
f3:93:0a:9c:3a:e5:ce:f4:28:55:3e:80:7b:ab:0d:
13:5a:22:dd:f9:11:24:a6:55:eb:51:e3:46:c8:a5:
fb:b6:6b:ce:01:92:52:3c:0d:92:77:f2:07:06:e7:
e2:c5:7c:4e:a2:87:66:96:18:31:64:38:2f:b9:6c:
ce:68:45:18:82:e8:91:43:0f:65:91:08:ac:3b:42:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:0b:28:52:1a:99:4e:e6:b8:81:3a:7b:3a:20:ff:6f:af:34:
2d:fc:ea:aa:c6:b6:02:d0:a0:8a:d8:e1:87:ce:f1:a7:32:80:
be:10:fd:24:bd:89:b4:6c:8c:aa:41:7c:e0:26:61:80:19:62:
16:48:0b:fa:8d:4e:cc:da:28:99:a2:30:b8:be:0e:7c:41:82:
7a:93:a1:9c:4c:32:7b:d4:3b:33:6f:ba:f2:06:21:86:2d:3c:
73:29:74:70:98:dd:77:67:c3:e7:41:2e:dd:a4:00:34:4d:ed:
94:4b:f0:55:79:36:ed:10:51:cc:7a:f4:61:e8:d9:d2:3d:85:
20:f3:ca:8e:49:40:9d:c7:f3:1a:9b:13:47:c7:97:b9:f9:d3:
49:28:36:bd:d5:9c:6c:ba:e2:d1:44:66:43:98:64:d5:95:b7:
45:80:28:e8:77:ad:4d:7a:d6:72:27:af:fc:5e:39:0b:d7:f5:
4c:03:e7:a2:af:e2:cd:02:f0:68:87:23:d7:b0:64:ed:3f:18:
75:c2:90:3a:2f:48:a4:4e:87:0b:6f:9e:02:2f:49:0c:1b:cd:
8c:4b:e9:60:ed:6f:f8:f0:94:94:e8:66:7f:c8:ba:08:71:5e:
24:88:d4:a7:4a:0c:14:e3:25:b1:d9:ee:b1:53:2d:80:0e:a2:
d6:94:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:01:09 2024 by rpki-client on console-fra.rpki-client.org