Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer (raw, json)
Hash identifier: mHNSzHgO2UXylDPWhs2ZWqfWljV/Hd6wXKHJQwFYYp4=
Subject key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D2B9CFFE2A5C0C6DE61967CF1B9BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21392
AS: 25542
IP: 62.148.160.0/19
IP: 80.247.160.0/20
IP: 81.26.208.0/20
IP: 81.93.48.0/20
IP: 85.255.208.0/20
IP: 87.237.96.0/21
IP: 94.126.64.0/21
IP: 185.2.24.0/22
IP: 185.111.120.0/22
IP: 185.139.148.0/22
IP: 193.239.88.0/22
IP: 2001:16e8::/32
IP: 2a00:f80::/32
IP: 2a02:728::/32
IP: 2a02:4640::/32
IP: 2a06:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:9c:ff:e2:a5:c0:c6:de:61:96:7c:f1:b9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:34:a1:3a:76:0a:84:16:c3:c9:04:c8:41:
0b:0f:d8:b4:b6:9a:cf:eb:75:83:0f:c8:ad:b5:d9:
68:76:c3:62:ac:d5:b8:47:44:71:b1:88:57:b2:5e:
b8:65:ce:17:da:93:30:b3:4d:59:73:b5:6e:55:81:
fb:44:d7:bd:96:94:b9:f5:ef:4c:18:01:02:b0:8d:
9c:06:5f:2e:7e:5f:a6:1a:37:25:e0:15:56:f7:e9:
3d:51:94:02:34:d9:32:54:a8:aa:59:f1:89:7d:b4:
94:db:8c:36:a4:e8:cd:f8:52:16:98:e0:10:d8:66:
a5:21:43:49:2e:b1:a5:06:2e:42:53:1a:d8:13:a7:
53:97:c4:55:0d:da:2f:8a:47:86:f8:52:36:03:38:
4d:52:cf:34:8e:e7:1d:51:fa:23:de:d5:2b:7e:04:
af:3f:50:78:53:11:58:35:06:65:c2:a4:53:9e:ce:
ec:27:79:fc:b4:2d:5f:c4:6b:a6:53:e2:90:9c:97:
fe:69:4b:a8:72:9a:8f:67:9e:9f:c9:5e:f1:09:46:
cf:41:dc:a6:31:c0:dd:00:b2:06:44:a9:33:f4:f4:
28:a3:59:14:cb:6f:49:fd:e9:07:c0:94:fd:3a:4e:
08:f0:38:68:a7:10:a4:89:92:fc:00:1d:01:c0:18:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.160.0/19
80.247.160.0/20
81.26.208.0/20
81.93.48.0/20
85.255.208.0/20
87.237.96.0/21
94.126.64.0/21
185.2.24.0/22
185.111.120.0/22
185.139.148.0/22
193.239.88.0/22
IPv6:
2001:16e8::/32
2a00:f80::/32
2a02:728::/32
2a02:4640::/32
2a06:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21392
25542
Signature Algorithm: sha256WithRSAEncryption
71:ce:8d:f1:c5:15:63:44:52:ad:5c:ea:ed:b6:9e:7d:81:7f:
be:c2:5e:29:41:ca:9a:ad:c6:f2:bc:ef:56:ad:96:dc:c4:aa:
b2:89:eb:1c:f8:ec:fb:ed:cb:fe:85:15:af:97:8d:38:73:32:
25:e6:56:a0:de:8c:f7:a5:9c:e4:27:ca:e9:9e:e8:c2:c5:93:
02:33:ec:e5:1f:3e:96:ec:88:a0:30:0c:d2:b9:23:84:42:43:
e7:40:e1:82:35:9e:4b:7b:de:95:2f:1d:8f:31:76:04:8d:14:
f4:11:51:e6:da:e6:f4:4f:e7:84:ba:da:8c:3a:1d:a9:be:15:
3c:21:a1:e9:aa:3b:00:7b:39:60:7f:84:3b:d6:74:a2:0a:af:
de:08:e6:0f:02:5a:d4:92:34:4f:d5:54:2d:5b:b7:ef:30:16:
26:66:3a:84:01:d5:59:4c:d9:24:6e:f9:4e:e6:e2:ed:29:d0:
2f:03:42:8e:b3:9f:e2:1d:5a:aa:fd:b6:e3:a3:99:2f:fb:69:
ef:82:58:37:78:2b:c7:d7:1e:3b:e1:e5:08:a0:15:e0:d2:8c:
16:48:da:d3:59:e3:f2:3c:7b:e5:5f:da:61:92:c4:d2:62:18:
38:84:05:d5:fe:0a:85:45:82:89:67:e2:94:89:3a:f5:d4:74:
ee:c9:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:23 2024 by rpki-client on console-ams.rpki-client.org