Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.cer (raw, json)
Hash identifier: SCSeV8UfXl5QpE6XWxZLTX19JiTzcc/fPwiCgZM7jvM=
Subject key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87138AE6AC159A2449865DAA7C5A1A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34402
IP: 91.203.52.0/22
IP: 91.227.56.0/22
IP: 195.225.76.0/22
IP: 2001:678:120::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:38:ae:6a:c1:59:a2:44:98:65:da:a7:c5:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:c6:49:eb:b1:c0:a9:95:a0:b5:41:8b:26:
23:bb:65:0c:c0:32:44:00:2d:b9:35:a5:dc:29:c8:
55:8c:0e:dd:9f:94:e4:55:eb:71:5f:fb:b8:c5:40:
0b:70:e5:be:a9:4d:76:e7:ce:43:b4:17:98:87:c3:
52:21:1d:5c:26:92:66:c7:d8:30:f4:e6:02:47:23:
17:fb:be:63:e7:f1:c5:97:4b:f8:bb:2b:c0:a3:1c:
2e:ba:3d:77:b8:b4:30:0e:92:d6:4f:c5:a2:ea:5f:
9f:ac:82:7b:0e:34:a4:95:aa:2c:9b:9b:6f:41:6a:
04:b3:54:a2:b8:cf:5b:52:24:ec:d6:e7:90:cc:f9:
e7:8b:fc:56:7d:25:11:56:09:6b:10:69:7c:e1:ec:
5d:22:60:8d:9b:2e:8a:d3:f5:1d:5b:7c:1a:e1:6f:
66:ab:a7:e6:65:3c:74:8b:b0:27:76:9a:00:b0:9d:
b5:5e:3d:6e:36:1b:37:2b:8c:19:1f:0b:21:6c:79:
64:c5:84:93:c3:d6:af:f0:eb:68:21:62:74:9f:c5:
01:36:2c:53:aa:13:f2:fe:48:d3:52:6f:15:16:5a:
4f:66:07:1b:42:51:54:5d:8f:4d:83:23:08:4f:f5:
dc:f5:c1:b2:a0:f4:b7:f4:ac:e3:40:0f:a4:93:b3:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.52.0/22
91.227.56.0/22
195.225.76.0/22
IPv6:
2001:678:120::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34402
Signature Algorithm: sha256WithRSAEncryption
9f:de:aa:1b:71:86:78:1c:e7:25:74:7c:57:09:2c:73:8b:9e:
0e:32:f8:ad:97:a6:37:66:66:81:d7:82:a4:8c:ec:e0:d3:1f:
89:2e:bc:f4:7b:a6:1a:5d:40:39:b5:67:b7:95:78:2c:da:f5:
85:d4:0e:63:a0:ff:8c:1d:73:d5:bc:65:6f:7d:b8:8f:3c:01:
c4:d0:4b:cf:fb:62:7a:a7:32:2a:9a:94:01:b6:83:de:14:ca:
a8:06:82:1a:08:fb:d5:0d:4e:35:a9:e6:37:7d:fe:4d:b2:47:
c6:ea:25:d3:39:b3:61:12:c5:85:7d:f5:22:63:cd:85:5b:bd:
b7:1e:90:27:11:52:db:b7:c1:d5:91:02:70:7f:63:3b:46:d6:
25:32:e0:d7:a1:19:30:59:a8:33:c8:87:21:ab:9d:5d:f1:de:
92:67:6a:a6:cc:07:df:fa:c7:e6:75:b7:38:36:44:59:2a:d6:
b0:ec:f5:85:38:21:4a:f2:b1:ee:30:3d:36:2d:23:45:51:ea:
a6:25:7c:57:32:8f:89:ab:11:d5:90:d9:ed:3b:f9:9f:42:84:
2a:59:92:49:ab:07:d0:e7:75:05:f0:4a:7e:26:d7:d4:1f:2a:
0f:7b:ab:ba:54:38:4f:a4:15:ad:85:5f:df:d6:06:80:5f:d4:
e3:10:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:40:47 2024 by rpki-client on console-ams.rpki-client.org