Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer (raw, json)
Hash identifier: HeGKYr56w1LnHDoJaw5OC6sU4op8Vd8ABNfYlqG7/vQ=
Subject key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5C66888889C7E114661DC7B85554
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35320
IP: 78.154.160.0/19
IP: 80.93.112.0/20
IP: 185.12.140.0/22
IP: 2a02:5f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:66:88:88:89:c7:e1:14:66:1d:c7:b8:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:7d:df:15:a0:bd:56:c1:6f:9f:72:4b:d5:
53:22:15:47:23:82:bb:5d:a2:ad:49:46:26:71:57:
56:79:0d:eb:82:1b:35:5f:fa:93:ad:28:3b:75:ff:
e8:59:77:b8:86:00:f7:f4:cb:cd:e4:ce:93:73:02:
fe:77:83:09:8d:44:13:ea:81:14:58:f2:80:db:1d:
06:4d:34:48:cd:da:09:6c:e4:85:af:0b:f5:12:d5:
e3:1e:4a:c5:93:d3:2c:03:58:2f:32:36:e7:54:cc:
f5:b1:a4:00:e2:91:8c:c4:40:5c:a0:fb:72:a0:83:
33:37:e7:c4:49:9c:85:99:51:71:64:fd:73:00:0b:
a0:1a:53:79:bb:d3:6c:a5:9b:6b:20:b6:3c:cc:90:
99:ba:9c:34:e3:35:ec:1e:57:5c:79:64:4c:09:71:
f0:0f:86:b4:92:78:6d:1f:0f:d7:a6:8d:a9:1e:fd:
41:27:30:24:bf:a3:c1:5f:aa:bc:52:23:1b:37:e3:
ab:11:c1:8c:de:40:d2:df:37:72:3b:82:e3:cd:76:
a2:46:c5:3e:ab:55:26:5b:d7:ae:b3:74:7c:5c:f9:
c0:ad:07:99:f8:6c:b8:4f:05:87:4d:d2:c7:8f:8b:
eb:e7:7f:8d:ae:fa:eb:92:62:4b:31:c7:32:e3:be:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.160.0/19
80.93.112.0/20
185.12.140.0/22
IPv6:
2a02:5f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35320
Signature Algorithm: sha256WithRSAEncryption
81:1e:cc:a7:34:7e:43:5f:08:13:38:cd:97:3a:77:84:65:d9:
a9:2a:96:b5:f5:c6:aa:9c:0e:fe:99:d4:f8:b2:eb:0a:d9:5c:
d2:d3:77:5e:41:48:c0:1e:14:2c:f1:dc:ac:5a:7a:2b:38:e8:
f5:6d:42:9a:89:d3:6e:0d:08:ff:60:ee:8e:7d:99:c5:05:3f:
4c:9a:03:06:64:d8:4a:73:48:84:6f:2d:f3:ca:e7:5a:6c:5a:
97:ce:98:34:b0:74:84:75:47:0d:26:60:88:0c:e5:f2:4e:dd:
43:e1:22:61:05:3a:e4:0d:ac:01:dd:fd:9c:9d:cf:3e:bc:b0:
fc:0e:ef:c4:eb:49:14:84:bf:fb:85:19:8f:52:82:e0:91:a8:
86:15:bc:bc:bb:f6:19:c2:00:0d:ee:76:ef:d4:4d:5c:b1:a9:
d6:1c:a6:8d:c6:8e:64:d6:09:ba:f4:d4:ed:28:5b:6c:a5:a0:
0f:79:a1:ec:51:f0:01:0e:40:fc:04:c9:8f:29:cf:b1:69:20:
58:96:a9:b3:19:74:d5:1a:bf:0f:f8:7e:63:ea:53:8f:a2:fb:
26:02:66:bb:bd:c4:39:88:13:e5:ed:f4:14:f2:c0:f0:e9:c2:
9c:cb:25:76:c5:c5:7e:9e:d3:34:a9:0a:13:8a:fb:cd:7f:36:
7c:c7:94:a6
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQfjFxmiIiJx+EUZh3HuFVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjBhMjg3YmVhOTI1ODhmYzVkYWU0ZjkzZmIyNTYyOGYzMmQxOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1up93xWgvVbBb59yS9VTIhVHI4K7
XaKtSUYmcVdWeQ3rghs1X/qTrSg7df/oWXe4hgD39MvN5M6TcwL+d4MJjUQT6oEU
WPKA2x0GTTRIzdoJbOSFrwv1EtXjHkrFk9MsA1gvMjbnVMz1saQA4pGMxEBcoPty
oIMzN+fESZyFmVFxZP1zAAugGlN5u9NspZtrILY8zJCZupw04zXsHldceWRMCXHw
D4a0knhtHw/Xpo2pHv1BJzAkv6PBX6q8UiMbN+OrEcGM3kDS3zdyO4LjzXaiRsU+
q1UmW9eus3R8XPnArQeZ+Gy4TwWHTdLHj4vr53+NrvrrkmJLMccy474K1wIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFD8KKHvqkliPxdrk+T+yVijzLRltMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzkwMTRj
My0xYTQ5LTRlNjItOTI0My0yMTMzNWQxMDYzYWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOTAxNGMz
LTFhNDktNGU2Mi05MjQzLTIxMzM1ZDEwNjNhZi8xL1B3b29lLXFTV0lfRjJ1VDVQ
N0pXS1BNdEdXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQFTpqgAwQEUF1wAwQCuQyMMA0EAgACMAcDBQAq
AgXwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCJ+DANBgkqhkiG9w0BAQsFAAOC
AQEAgR7MpzR+Q18IEzjNlzp3hGXZqSqWtfXGqpwO/pnU+LLrCtlc0tN3XkFIwB4U
LPHcrFp6Kzjo9W1CmonTbg0I/2Dujn2ZxQU/TJoDBmTYSnNIhG8t88rnWmxal86Y
NLB0hHVHDSZgiAzl8k7dQ+EiYQU65A2sAd39nJ3PPryw/A7vxOtJFIS/+4UZj1KC
4JGohhW8vLv2GcIADe5279RNXLGp1hymjcaOZNYJuvTU7ShbbKWgD3mh7FHwAQ5A
/ATJjynPsWkgWJapsxl01Rq/D/h+Y+pTj6L7JgJmu73EOYgT5e30FPLA8OnCnMsl
dsXFfp7TNKkKE4r7zX82fMeUpg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:32 2025 by rpki-client