Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
File: W-4FGpOQHswBdEB5qkrC-wd7n8E.cer (raw, json)
Hash identifier: RuUHOp37neEvR+DoLtTuQqLkqVyaRADRd0wQ50sXEvU=
Subject key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DF6ED1C0292890522284D7613534D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39450
IP: 31.15.16.0/22
IP: 45.128.224.0/22
IP: 91.213.39.0/24
IP: 91.228.64.0/22
IP: 92.246.88.0/22
IP: 194.4.164.0/22
IP: 195.20.137.0/24
IP: 2a0d:8540::/29
IP: 2a0e:4240::/29
IP: 2a11:500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f6:ed:1c:02:92:89:05:22:28:4d:76:13:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:6d:62:31:53:a1:6d:d4:f2:f8:20:20:d8:
e0:f4:92:f8:e7:93:44:40:42:42:a4:0f:5b:48:fa:
40:d7:f2:a4:61:ae:36:f3:a0:e7:97:91:ba:a0:a7:
5c:4b:11:ca:8f:63:c8:db:01:12:56:fb:29:82:e3:
0f:e2:90:fd:f2:f6:a5:c2:60:e5:37:88:5c:01:0c:
c1:a7:c4:c3:6c:9b:fc:65:3b:f3:1f:20:f0:2a:40:
7d:0f:df:95:8b:3e:5b:d6:8a:78:f4:75:ca:97:bd:
6c:2e:ff:cb:5a:55:63:32:81:dd:05:45:f8:fa:38:
90:fe:c2:4c:43:a0:26:54:43:79:e1:8c:3a:e1:c3:
15:3d:bb:4c:4e:6c:71:91:4d:5c:56:82:5c:10:cf:
66:00:ae:1f:65:7d:54:0e:fd:1f:6d:ec:d2:2e:52:
46:e5:86:0e:ea:a3:27:2e:80:fc:b9:65:76:a9:92:
66:72:95:93:e5:83:24:d9:2d:81:b8:f2:1a:90:5a:
64:65:f3:b1:45:48:8f:d4:28:ec:06:a7:a2:0b:da:
f5:c3:07:4e:df:47:ff:09:b9:77:c2:a2:4b:b6:12:
71:eb:69:7e:1a:2d:71:ae:c7:13:f1:8c:08:d7:47:
f8:50:46:c1:4f:65:98:a5:9f:85:ea:65:57:ce:69:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0/22
45.128.224.0/22
91.213.39.0/24
91.228.64.0/22
92.246.88.0/22
194.4.164.0/22
195.20.137.0/24
IPv6:
2a0d:8540::/29
2a0e:4240::/29
2a11:500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39450
Signature Algorithm: sha256WithRSAEncryption
9c:4e:64:57:69:78:86:91:9f:9e:53:49:e7:28:71:c0:99:f0:
fd:fe:b5:c7:a4:32:e9:df:09:12:ab:e4:bd:ae:c4:fa:65:e1:
3f:0a:d3:55:bb:c4:73:5e:3a:36:ee:2a:6e:71:cf:a9:4f:46:
14:ad:ed:01:02:e0:f8:02:e1:3f:1d:1b:4f:a7:48:fd:09:73:
ad:d3:07:72:c3:fc:97:21:31:ee:4b:7f:d5:ce:d6:9a:6c:37:
33:16:e0:3b:14:2a:ba:0f:33:d2:7c:cf:77:0e:3e:81:a3:82:
a3:b0:10:93:34:a2:47:00:d9:f1:0b:bb:30:37:6d:a4:61:f8:
3a:06:2d:0e:3a:24:e9:2f:48:20:ee:ec:56:45:8a:73:f8:8f:
3b:45:70:73:ee:9a:2b:6a:92:66:e0:16:8f:be:9d:56:13:29:
27:06:97:7c:78:f7:45:de:fc:e8:09:4d:1a:d8:f4:68:81:c5:
f0:10:30:00:ca:0f:2a:a9:07:be:a1:2e:cb:7f:c6:58:c0:97:
f7:2d:10:da:a3:5d:ef:54:cc:5c:09:db:09:55:4a:34:60:3c:
d9:90:d6:2b:99:b0:0c:5b:69:41:ce:b2:90:56:0d:f7:6b:6a:
0f:2a:ef:0b:51:8c:4a:f5:9c:ea:8e:a3:e5:18:af:5e:e8:c5:
50:db:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:14 2024 by rpki-client on console-ams.rpki-client.org