Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer (raw, json)
Hash identifier: EppAIBHfyM5qRrKjXWj7+Laist7+v/zhe4mRy84iTUE=
Subject key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942C12C40D2A84399E1F2F3C69D7E36909
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:10:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.32.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:12:c4:0d:2a:84:39:9e:1f:2f:3c:69:d7:e3:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:10:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:47:8e:84:7c:63:27:5d:39:b6:cf:9b:cd:
c2:03:b2:a7:a8:e4:3d:eb:7b:d8:45:dd:90:3a:f9:
e3:cb:9c:f4:30:7a:26:f3:65:bc:dd:f6:16:3a:95:
d3:e8:47:d0:9e:15:2d:14:fe:d9:24:4e:33:1a:ff:
c4:47:2c:72:d2:8f:25:84:bc:0f:15:c2:74:b7:47:
8f:a7:6e:49:32:64:43:75:21:9b:b5:e3:a5:f6:c2:
ff:69:c6:14:0a:16:ed:a2:e9:ec:9c:4c:f8:e6:80:
6f:93:15:55:26:19:8d:d4:03:23:ac:8a:cd:ab:00:
ed:76:7a:e3:87:e1:f2:d8:17:1c:cb:36:55:80:63:
99:f7:5a:95:c3:88:81:df:65:de:88:57:13:5b:21:
81:85:ee:9a:20:db:3b:02:c2:ed:77:97:c5:b9:f4:
5e:18:7d:b6:5c:02:7d:7b:ae:dd:c5:7c:e2:73:d1:
6a:b0:a6:a6:aa:c5:52:b7:cd:a4:56:77:57:5d:46:
ef:59:7f:80:0f:4b:5e:3b:13:4f:3f:0d:22:0f:9f:
eb:61:a9:0b:a5:64:0c:61:2f:ad:a1:c9:91:39:c1:
3a:91:70:1e:59:20:01:32:fa:ef:37:79:9a:83:c6:
a7:2b:ca:05:1f:69:71:79:07:a6:14:84:cd:e2:74:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:61:bf:9d:63:95:0f:46:31:31:92:07:6f:fa:04:ee:07:13:
5a:6c:26:32:58:5c:e2:fc:90:5f:d4:a3:f1:f8:78:83:33:e6:
5a:2a:39:27:4a:a6:95:a8:a6:14:57:23:b8:49:f4:d4:d9:03:
e8:ce:ff:ac:d6:f9:51:da:e7:ad:2f:6d:1e:e0:6a:66:3d:7c:
c5:ff:d0:8e:28:0f:a6:7c:f0:89:30:e3:ee:25:e9:ea:06:26:
22:25:28:14:c1:38:42:2c:10:33:32:0b:ba:0a:b7:d4:cb:f2:
fb:dd:95:e5:d8:59:d7:13:87:bc:b3:42:b4:51:1d:e6:ab:4c:
95:a9:fa:df:41:ff:05:32:3f:03:29:4d:72:3f:bd:a5:65:a7:
57:35:a1:5d:1e:8d:ee:70:06:cc:94:72:8f:53:0c:94:9c:24:
a0:bc:9f:12:34:7b:ad:b3:76:97:4e:3a:13:38:30:c4:fa:7e:
d9:e0:26:90:9e:9e:73:61:bc:60:f4:99:9b:b4:c3:bc:7d:c4:
e9:69:1c:35:4a:a5:e1:cf:0d:d7:d3:d9:dc:38:8b:73:03:7d:
41:f5:ca:a9:cc:02:a5:6b:5f:d8:4e:d5:58:a4:08:c4:0d:4f:
35:8d:d1:cf:2a:67:87:65:d5:e2:05:7d:70:8c:a4:10:4b:af:
d9:ac:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:15 2025 by rpki-client