Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.cer (raw, json)
Hash identifier: 0eM2LCUPDnzyDstXeXvL4TWQm+SDa7k7Qi7d26zLujY=
Subject key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726F63EF11A41F6AED5F1D3C39EF02B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 130.82.0.0/16
IP: 192.41.141.0 -- 192.41.145.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f6:3e:f1:1a:41:f6:ae:d5:f1:d3:c3:9e:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:c9:fd:9d:db:6c:e8:94:de:56:2e:d5:25:
6f:fe:2a:7a:0e:e8:eb:26:15:db:0f:32:7d:9c:68:
99:d0:0c:0b:52:be:41:93:41:13:06:fa:ee:80:af:
9e:45:b2:54:29:df:87:b3:77:b0:cf:cc:f7:ce:de:
3b:f8:d8:1c:9c:6e:cd:ae:60:75:eb:43:cf:d6:c5:
1c:d9:7c:83:68:15:01:5f:3d:b3:97:f4:85:45:08:
77:84:f3:31:4c:d9:32:07:d6:98:86:26:31:80:31:
2d:68:a1:d3:e9:7d:cc:b2:d6:92:f0:dc:25:ea:4f:
0f:b1:64:0f:a0:26:8b:b4:99:e2:56:44:3e:7b:0b:
3e:86:0a:af:6e:65:eb:83:10:9f:50:3e:f1:3c:24:
50:60:ba:90:49:71:6b:22:6a:d9:ba:7d:73:3f:33:
a9:1d:ac:7b:14:28:ba:e0:9f:61:8b:10:63:0f:b3:
c1:45:b6:f5:8c:36:4a:64:f6:8f:83:4c:25:e5:da:
b5:e9:6c:b3:97:05:cb:bb:b6:9f:c7:28:98:93:1d:
d4:f2:c5:a1:5a:65:09:a9:76:fb:23:07:94:a1:96:
1d:bf:c1:6b:3b:06:22:b0:12:6a:5a:3c:be:38:7a:
41:a2:3c:03:63:fc:f1:02:a1:34:35:f8:e0:d1:f6:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.82.0.0/16
192.41.141.0-192.41.145.255
Signature Algorithm: sha256WithRSAEncryption
66:4b:cc:74:7b:bb:3d:f6:90:11:cb:d3:50:cf:af:d1:96:e5:
3f:ef:15:7d:59:74:df:d3:4c:6d:84:db:a9:b3:f5:cc:d1:3f:
5f:df:ad:c8:28:23:dd:79:f2:33:72:a6:9c:f4:65:cd:ea:a9:
05:e2:57:69:88:d3:44:4e:a7:7c:85:f6:eb:1e:21:a4:d3:45:
ae:ef:57:35:4d:d0:80:fe:5e:ad:39:d1:2f:89:51:0a:b4:05:
3e:e6:ef:da:f9:dd:10:7a:ee:81:cf:4b:b8:27:86:96:48:78:
d9:05:b0:f2:60:76:56:8e:f3:5e:50:d6:b3:c3:b2:c4:cd:9a:
30:e7:c8:7c:89:e6:4d:a3:10:2b:30:9e:52:33:07:0c:64:4f:
bd:9b:74:3b:9c:2d:0b:e5:69:f1:15:fa:82:1d:a7:ad:ae:f3:
d5:57:12:3b:2e:d9:5d:a2:74:63:5e:a5:58:66:51:74:ce:b9:
cb:d8:59:75:57:7d:44:18:55:8c:c8:36:2f:9f:fa:cc:ce:59:
ea:86:78:38:a0:d8:9e:56:42:94:6f:02:5c:bf:48:17:dd:ed:
55:3d:0a:13:00:6b:1c:b4:b7:a2:e4:b1:1a:86:ef:c9:29:1c:
a2:c8:13:2c:74:53:92:b2:ba:cb:b7:17:80:82:be:7d:73:18:
92:42:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:03:13 2024 by rpki-client on console-ams.rpki-client.org