Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
File: W1v_nUH3GfYmAMMtNBDduZ7Msww.cer (raw, json)
Hash identifier: OJaTLZTI3MXZIO/5cxcJEo2/vgBasmhRseEvqBmjDss=
Subject key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492A23E13F34358780A693AF5C3C513
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25228
AS: 57731
IP: 78.138.4.0/22
IP: 78.138.36.0/22
IP: 83.229.52.0/22
IP: 83.229.100.0 -- 83.229.102.255
IP: 185.10.6.0/24
IP: 185.115.108.0/22
IP: 213.255.212.0/22
IP: 213.255.220.0/22
IP: 213.255.232.0/21
IP: 213.255.252.0/22
IP: 2a02:de40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:a2:3e:13:f3:43:58:78:0a:69:3a:f5:c3:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:84:cb:5a:df:bb:ab:56:89:67:d6:78:1b:
0a:ab:6b:3b:83:65:11:a6:24:e0:25:70:e0:78:10:
83:9f:91:05:9c:b2:81:00:59:55:cb:a4:45:3c:e0:
14:bf:5c:9f:74:59:6a:da:e6:41:45:39:9a:d2:dd:
1e:4c:4c:84:de:f9:79:ec:ce:e9:4e:ba:d6:49:99:
47:db:8d:db:20:a3:e5:5c:fe:d4:d7:c2:32:ac:92:
b8:85:c0:27:b7:1e:6a:b3:2b:c6:47:d8:81:6e:12:
fd:3d:84:83:f6:1a:99:44:9e:33:b2:4c:0b:91:84:
88:67:9a:d0:7c:ad:7a:3d:0b:22:57:f3:2a:84:f4:
22:52:52:df:dc:0a:f9:d7:e8:66:84:d7:be:db:3e:
d7:4c:4b:f9:56:8b:22:6d:3a:98:92:f6:48:eb:c2:
f0:e4:17:e5:52:61:d8:df:80:d4:e5:dd:c1:31:5f:
69:d7:e7:ae:67:46:57:ea:4f:83:6a:6d:59:8c:17:
12:d3:5c:04:62:56:9a:df:fa:9e:f9:01:a3:10:82:
5e:0f:5e:ba:bd:25:5d:20:17:21:c7:ef:c8:27:1d:
f2:98:3b:c1:3f:f2:79:95:43:59:0f:72:4a:75:20:
91:b2:28:7d:e3:69:46:f5:37:80:94:b2:cd:a2:81:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.4.0/22
78.138.36.0/22
83.229.52.0/22
83.229.100.0-83.229.102.255
185.10.6.0/24
185.115.108.0/22
213.255.212.0/22
213.255.220.0/22
213.255.232.0/21
213.255.252.0/22
IPv6:
2a02:de40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25228
57731
Signature Algorithm: sha256WithRSAEncryption
72:50:f4:fd:0b:55:55:ca:b3:86:52:80:a3:7d:e2:ab:d0:e1:
51:8d:b2:10:c6:03:67:25:a9:93:52:5c:6a:8d:ba:07:04:1c:
31:fd:6b:98:e5:d2:01:ec:19:85:53:0e:8e:8f:35:23:0b:d5:
84:26:c2:1e:67:2a:a6:b8:28:00:64:b9:3b:67:6e:cb:64:96:
11:2b:c0:76:db:e0:63:87:e2:bf:32:d7:04:bf:c0:50:89:2f:
fb:c5:a8:cf:8d:e1:cf:15:3c:e8:9f:bd:03:7b:c9:81:34:52:
e3:51:91:ec:a6:d6:c5:9a:2e:f6:f4:32:7f:2d:cd:7b:66:e1:
bc:83:87:03:1f:62:80:cd:8d:9e:c9:81:86:85:4f:cb:08:61:
86:b7:9f:97:63:9b:12:d6:ac:bc:06:fc:7b:be:f8:01:35:e0:
07:7a:51:bc:a5:14:b8:de:c9:26:9d:c5:5f:d8:99:13:c4:f2:
30:50:2a:ac:8f:6b:bc:e9:b3:43:fd:c6:4f:0c:a3:c4:60:4b:
f4:95:28:2e:93:1b:26:a6:66:33:59:e4:f6:da:21:0a:a9:bb:
09:23:c1:f2:a2:87:4a:68:af:77:e4:42:b1:36:30:78:18:90:
40:02:9b:05:6d:8c:ca:fc:30:09:c1:bd:b0:18:fe:6d:f0:af:
03:42:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:46:37 2024 by rpki-client on console-ams.rpki-client.org