Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
File: WxweBiQDm9HxqUbLUTyTOG-raxk.cer (raw, json)
Hash identifier: 72f1rqdseEb56ODNmMDrTwqa4+cvnXBl6iouRLuHgj4=
Subject key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500429BC16FDEC0B4BE777E0D81B16A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29374
AS: 31545
IP: 193.16.109.0/24
IP: 195.149.94.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:42:9b:c1:6f:de:c0:b4:be:77:7e:0d:81:b1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:0d:22:9f:1d:c1:8c:f1:ce:a4:c8:fa:8d:
7b:97:2a:1a:27:c0:95:0c:5a:0e:61:89:7a:b1:33:
7a:54:a0:da:43:68:17:27:fb:63:c1:93:09:80:52:
a9:1d:fe:c8:12:d9:8d:d3:2a:b7:22:5e:63:ed:d4:
0b:ec:4d:44:d3:a5:e6:cf:d8:cf:0d:6f:d5:01:21:
06:f3:38:2e:9d:78:1b:4c:88:df:aa:20:25:e4:54:
f7:31:c2:94:c6:5d:01:e9:33:2d:9f:66:4c:b0:57:
5b:23:e2:5c:03:1a:a6:ac:c8:c1:c9:7b:96:66:e4:
d8:a4:20:c7:e0:79:c3:df:f1:58:4e:73:72:92:a7:
02:97:16:d3:f1:65:61:38:4e:e8:8a:2c:79:f5:07:
de:63:ed:f4:97:6c:5b:47:4b:37:e9:3e:88:26:07:
57:18:7d:9c:a3:51:ff:b4:54:73:2d:d2:bc:34:b8:
b8:bb:30:96:7e:5e:ba:0d:e7:e1:dc:d4:32:3f:32:
08:3a:42:e1:df:4d:be:78:43:89:33:ec:6b:68:c7:
af:1e:a9:b1:a3:07:38:ba:70:35:e5:2e:6a:88:f8:
ad:07:e0:bc:e3:60:02:2f:d4:37:92:18:8e:1e:be:
e2:42:29:bc:bc:94:e8:ea:ea:ce:69:e1:87:f5:12:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.109.0/24
195.149.94.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29374
31545
Signature Algorithm: sha256WithRSAEncryption
00:d9:01:ad:db:66:78:e7:ca:b0:db:b1:ad:3c:2d:09:18:49:
aa:72:6e:6e:25:fc:21:06:2c:fa:7b:22:4b:95:ab:fc:52:bc:
b0:23:59:a4:4b:32:c0:0d:ce:06:bb:bd:3a:eb:a0:d8:8e:e4:
22:36:2a:07:05:c8:eb:6d:0e:72:f8:90:e4:a2:85:64:50:cc:
0c:f6:1c:d4:2c:0b:b9:5d:5c:49:e5:81:08:53:09:ee:6b:39:
ba:ea:c3:87:b0:b4:80:5f:e8:0a:b8:96:1f:bb:67:a2:2b:37:
27:ae:ca:95:42:c7:b3:52:95:d2:96:1f:e1:c9:3c:b7:77:e1:
03:1e:22:bf:34:a3:f9:85:ae:df:e4:35:b5:df:64:4d:e4:b4:
82:91:18:99:7f:f6:88:81:ce:f1:63:c7:e5:16:d2:1e:39:a2:
d3:09:b7:1e:24:20:4f:35:89:41:b5:4c:6a:82:4c:99:3c:dc:
e6:dc:86:d9:97:59:ef:ef:a7:b0:8a:07:8a:d4:ef:39:6d:73:
c4:0a:7a:a4:93:da:3d:37:ae:f8:41:b8:75:00:a8:13:ba:6d:
da:a1:26:bd:44:06:c8:a4:20:89:af:7b:8e:6c:61:a4:e2:24:
15:4e:37:be:58:48:75:22:76:3d:df:cf:7b:c7:e3:9e:b9:2a:
8d:dc:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:15 2024 by rpki-client on console-fra.rpki-client.org