Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
File: UAm8siUutkaQLMv9TJhssMK5E5g.cer (raw, json)
Hash identifier: zFJlUx7Ml7QZDhIuuWxW5oDaGuBq8QKaw6k96b8i1p0=
Subject key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019644DC29246B510CB03E4D3D8D2E3B3BF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Apr 2025 17:46:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212591
IP: 2001:67c:590::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:dc:29:24:6b:51:0c:b0:3e:4d:3d:8d:2e:3b:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 17:46:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:35:eb:84:f7:81:e8:f0:68:01:05:60:d1:
c5:54:cc:1e:d1:8c:70:b0:5d:55:8d:af:2d:9a:c1:
a6:36:12:23:2b:fe:72:74:59:63:03:1d:b4:f6:7c:
6b:0e:5a:6c:20:aa:d2:35:b5:5a:00:4f:81:1b:96:
4f:39:b1:2a:83:c8:1b:1b:f1:45:73:93:cb:c8:e0:
04:73:e5:e0:98:c0:c1:eb:f1:1d:43:df:f9:97:ba:
f4:ce:72:ce:27:8a:cd:ca:13:26:46:61:be:5e:9d:
da:39:16:88:c6:66:52:fa:c4:95:9a:77:dd:c5:34:
bd:4f:6f:f6:85:fb:fb:e2:52:c1:69:98:69:25:18:
15:66:f9:8d:74:4b:23:68:f4:40:bf:45:1a:ac:ad:
e0:d7:eb:88:4a:db:4f:65:e6:46:98:41:73:12:cb:
a8:98:d5:ee:9f:90:3b:10:e2:9d:cc:ad:37:27:3f:
0e:82:93:87:c0:78:06:59:8e:51:68:3f:6e:86:ec:
e9:bc:22:72:ea:82:44:e2:bb:04:7f:f9:df:b7:92:
1f:b8:2c:9e:f3:48:a3:c9:b5:e5:d6:96:f1:2b:4e:
c4:b8:13:4c:6d:57:ff:31:12:32:1e:32:47:8a:e9:
5a:2f:b4:fc:60:d0:46:12:c7:25:a2:60:ac:99:81:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:590::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212591
Signature Algorithm: sha256WithRSAEncryption
9d:05:99:8d:34:1b:50:3a:52:c6:8d:b9:c2:06:f1:0c:bc:c1:
07:ec:bc:96:89:9a:91:8e:cc:09:71:69:2c:52:99:73:14:a4:
6e:d3:80:6f:a8:09:36:92:6c:98:65:1a:ea:70:f9:6b:98:b3:
86:08:ca:67:e7:f1:52:a9:f5:9c:fe:5a:9c:62:29:94:41:88:
53:f8:5b:45:8e:23:63:b7:0f:39:51:31:ac:76:d5:7a:60:76:
c8:65:29:d3:86:7a:a9:8d:f7:5c:7f:32:d8:09:50:bf:6b:03:
ca:d2:44:df:e7:d5:62:2b:8c:d2:f0:04:a5:a8:39:26:6b:0e:
57:e7:23:55:19:a9:f8:58:8b:15:cc:f2:4d:87:eb:49:80:b7:
7f:c0:7a:c1:2e:91:16:4e:33:3b:94:18:79:2a:35:64:d4:af:
92:26:86:ce:70:2f:f1:2e:ec:31:02:84:c2:5b:c5:74:60:50:
1c:dc:17:22:31:39:95:7f:f8:63:fb:6c:12:0a:04:fa:36:27:
cd:2f:9c:a6:06:32:1b:d2:f2:df:05:66:f4:c1:cb:74:7d:4a:
bb:17:4a:c0:41:a4:e2:ef:c7:9b:93:f7:0c:04:b7:59:58:da:
8d:aa:f6:36:e1:24:03:b6:86:33:57:01:76:76:6d:da:bd:74:
98:ce:7c:75
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZZE3Ckka1EMsD5NPY0uOzvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDE3MTc0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDA5YmNiMjI1MmViNjQ2OTAyY2NiZmQ0Yzk4NmNiMGMyYjkxMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18164T3gejwaAEFYNHFVMwe0Yxw
sF1Vja8tmsGmNhIjK/5ydFljAx209nxrDlpsIKrSNbVaAE+BG5ZPObEqg8gbG/FF
c5PLyOAEc+XgmMDB6/EdQ9/5l7r0znLOJ4rNyhMmRmG+Xp3aORaIxmZS+sSVmnfd
xTS9T2/2hfv74lLBaZhpJRgVZvmNdEsjaPRAv0UarK3g1+uISttPZeZGmEFzEsuo
mNXun5A7EOKdzK03Jz8OgpOHwHgGWY5RaD9uhuzpvCJy6oJE4rsEf/nft5IfuCye
80ijybXl1pbxK07EuBNMbVf/MRIyHjJHiulaL7T8YNBGEsclomCsmYHaCQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFFAJvLIlLrZGkCzL/UyYbLDCuROYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2YxMmQ4
MC1kZWI2LTRiZjUtODUzYy1kNWRhODU4ZTE1ZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvZjEyZDgw
LWRlYjYtNGJmNS04NTNjLWQ1ZGE4NThlMTVmYi8xL1VBbThzaVV1dGthUUxNdjlU
Smhzc01LNUU1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAWQMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM+bzANBgkqhkiG9w0BAQsFAAOCAQEAnQWZjTQbUDpSxo25wgbxDLzBB+y8
lomakY7MCXFpLFKZcxSkbtOAb6gJNpJsmGUa6nD5a5izhgjKZ+fxUqn1nP5anGIp
lEGIU/hbRY4jY7cPOVExrHbVemB2yGUp04Z6qY33XH8y2AlQv2sDytJE3+fVYiuM
0vAEpag5JmsOV+cjVRmp+FiLFczyTYfrSYC3f8B6wS6RFk4zO5QYeSo1ZNSvkiaG
znAv8S7sMQKEwlvFdGBQHNwXIjE5lX/4Y/tsEgoE+jYnzS+cpgYyG9Ly3wVm9MHL
dH1KuxdKwEGk4u/Hm5P3DAS3WVjajar2NuEkA7aGM1cBdnZt2r10mM58dQ==
-----END CERTIFICATE-----
Generated at Mon May 5 11:06:00 2025 by rpki-client