Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
File: uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer (raw, json)
Hash identifier: uNj9wm6/DNYYrQcQZWdgRoHpdDmLkjQF4W8unAxCQBY=
Subject key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D0E4F0DE8AD7E208F036EA7F6CE32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49990
IP: 193.104.73.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0e:4f:0d:e8:ad:7e:20:8f:03:6e:a7:f6:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb24311c1ec0673c50497924c202a13d212659b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:fa:a1:1d:18:34:3b:0a:9f:cb:ad:bd:96:
b3:2b:ce:22:e7:9e:8c:3f:b6:31:b2:3b:76:d1:09:
a1:b3:f9:3d:d6:4e:2e:61:b8:23:1d:ec:6d:a3:56:
1e:57:83:3d:ad:c6:09:56:91:5b:56:c6:1b:0f:f1:
e8:c8:0f:06:72:63:5a:b8:fe:db:16:96:d5:5b:30:
94:6a:ba:98:98:58:92:af:21:02:aa:ee:7d:5e:aa:
d2:d6:b8:d5:20:6c:67:1a:12:86:96:fe:1e:5c:ac:
a5:b6:08:3b:ff:3a:ec:ff:1c:d7:e0:b4:bb:00:07:
15:ca:91:06:82:d1:1a:0d:19:98:b7:4a:62:ca:d4:
85:f6:ac:4d:1c:4b:68:ef:a2:2a:a0:83:97:a5:96:
ed:53:6f:ec:39:74:82:2b:45:68:c2:21:eb:4e:b7:
4b:61:25:11:1f:74:82:ca:b9:30:82:ef:da:a6:b2:
ef:8d:92:45:88:c9:7b:69:01:22:e6:16:8d:07:39:
d5:bf:e9:12:56:86:46:2c:19:64:03:ba:c4:15:38:
0d:96:af:5d:80:88:1c:1d:a1:fc:74:00:67:6d:43:
12:a8:0b:4e:2d:61:bb:21:21:54:84:08:72:30:f6:
b3:e8:14:f2:71:18:be:4b:98:56:ab:86:21:13:20:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.73.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49990
Signature Algorithm: sha256WithRSAEncryption
6d:51:ac:d8:01:8f:1c:9f:e9:5f:db:1c:7d:04:b6:ee:0d:c9:
06:8e:c9:4f:05:ae:7f:96:ec:5a:ad:27:76:a1:57:3e:ff:bf:
dc:74:0e:43:48:8b:49:e1:1f:0b:b4:66:f2:fb:fa:70:f2:c4:
2c:a3:85:61:32:1d:15:ae:2e:4b:51:75:2b:ef:4e:da:55:fb:
7a:a1:b1:c5:23:01:92:98:d2:2b:a3:71:11:d3:70:6e:77:f8:
f4:19:0d:75:78:1c:67:17:f5:dc:d4:31:53:fb:21:43:0d:b2:
3e:5a:83:f6:9d:6a:55:f7:f5:8f:3e:54:24:68:df:76:fd:7c:
b3:a7:bd:24:64:a0:45:c8:ae:e1:47:84:f6:7f:78:b7:35:a8:
90:1c:7c:7a:5c:65:78:c8:49:78:5d:38:53:f4:85:20:35:c4:
1b:e4:d6:2a:a6:e7:8f:3e:2d:3a:09:b7:a1:86:07:c3:ed:c7:
e0:9b:0e:f2:ed:47:d1:78:64:17:9c:12:20:a7:f5:cd:28:8f:
f9:3b:a6:cf:a8:66:a9:d2:4e:ab:46:02:f4:07:9f:83:5c:4a:
c7:9a:0d:e2:b9:ff:52:16:a5:3c:17:74:f0:25:73:9e:82:bb:
ee:e0:8f:b4:8a:c5:42:03:71:c7:fe:e3:80:7c:0d:cf:c8:6c:
f2:a2:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:28 2025 by rpki-client