Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-zw2-0mB946Penmhf1udPvli5Q.cer
File: W-zw2-0mB946Penmhf1udPvli5Q.cer (raw, json)
Hash identifier: P0RS0R6kfU8lyCz3P4EJ9TcYLR/Bfk/IMeVSAzikGC4=
Subject key identifier: 5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D7CF9DF9878AAEA7F0900E6E8BBAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206023
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7c:f9:df:98:78:aa:ea:7f:09:00:e6:e8:bb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5becf0dbed2607de3a3de9e685fd6e74fbe58b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:ee:8f:67:48:47:1e:06:81:30:56:d7:f6:
86:c1:ff:bc:49:d5:17:ef:88:3d:f4:75:dc:cb:4b:
71:d6:26:2a:38:dc:39:86:2e:ed:c8:21:14:90:6e:
8e:1b:be:51:1e:6d:4d:5f:62:ff:6a:3c:5e:0d:37:
0f:e4:a4:3c:17:8a:19:56:ec:53:d3:c8:9d:bb:80:
0b:ad:40:5a:a0:3d:06:8b:8c:a9:b1:30:6f:be:6a:
20:05:19:80:1f:53:5d:f7:e1:d9:ac:a2:66:35:4b:
d9:0e:3e:8f:d4:64:c2:23:62:21:f9:78:4e:16:db:
2b:46:bf:c3:db:b1:a7:b0:13:8d:4c:44:56:52:76:
96:3d:68:82:f0:ce:02:62:cb:35:6b:d9:20:f8:51:
91:1b:47:cf:8b:bd:fa:ea:4e:2d:c2:64:4b:12:9f:
a3:02:46:de:80:47:0d:37:45:e5:43:1e:a6:7a:56:
a2:55:53:27:91:69:3f:31:38:66:d0:04:b8:8c:78:
ec:07:7a:b7:cd:74:e4:d8:51:a5:97:d8:e9:5f:cf:
d7:15:ad:d1:4d:e4:c7:bd:c4:cc:a9:15:d1:8b:10:
fd:c3:07:07:da:d6:e1:6d:de:03:8c:b0:be:37:73:
55:ff:ad:36:30:f4:5d:d0:df:3f:99:d5:50:f2:1b:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206023
Signature Algorithm: sha256WithRSAEncryption
19:ef:45:b2:e2:f4:93:63:5b:e5:64:c9:f9:0c:2b:7a:2a:16:
84:00:2f:bd:ea:29:ff:a2:ba:f0:4d:1e:bc:0a:66:78:f2:e6:
41:03:64:48:8b:51:8e:dc:b3:c3:17:10:7b:68:07:10:a6:44:
d0:74:05:12:09:51:09:8d:1d:0c:86:d0:1e:24:e8:db:ca:3b:
73:e6:90:ac:c8:4e:7c:12:02:b9:cc:8f:44:52:08:5c:fd:6c:
0d:31:70:c7:2b:17:e5:f9:b6:06:58:1f:d3:6d:85:c9:34:84:
84:ae:b1:06:32:e1:38:7f:63:ea:7d:fd:27:31:14:b4:b7:b4:
da:66:a6:82:04:f9:af:84:ec:34:9d:d3:6c:f3:18:81:d5:c5:
3d:54:bf:c8:28:75:e9:45:0b:f5:88:10:0c:c9:5c:42:84:85:
c2:3b:d0:d6:3c:2f:1f:d5:2e:c9:e4:11:30:16:0c:5c:a5:b6:
e7:c8:c2:ce:35:32:99:7a:a5:93:49:37:58:a7:40:35:46:50:
70:35:74:b0:c0:c4:c6:66:18:d3:b8:2b:db:cb:ce:61:16:3c:
d0:71:66:fe:e6:de:0f:27:e7:1e:c1:84:09:64:18:2a:d7:3d:
1f:b1:f0:ba:b8:15:3d:9a:d5:a5:e0:b8:98:57:23:9c:bf:d4:
11:6c:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:13 2024 by rpki-client on console-fra.rpki-client.org