Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
File: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer (raw, json)
Hash identifier: FvYO+l9IsuLbdYaRQqzoyetJKPQRr5Jo47SJzl8gkPE=
Subject key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF776F62AF9D5FCD6E64E4CB57AF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 64480
AS: 207092
IP: 89.40.171.0/24
IP: 93.113.129.0/24
IP: 185.84.67.0/24
IP: 185.162.228.0/22
IP: 185.193.12.0/22
IP: 2a0a:3440::/29
IP: 2a0b:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:76:f6:2a:f9:d5:fc:d6:e6:4e:4c:b5:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:b5:53:6d:bf:ce:2d:99:98:20:83:33:e6:
82:16:f7:60:4d:9d:e7:22:1f:9c:22:a4:d4:de:68:
88:c0:9c:53:5d:39:a4:0d:13:e2:8d:6a:6a:2d:a8:
44:93:2b:1d:74:1b:fc:3f:22:04:46:78:09:de:ab:
a8:4e:3c:db:4e:e3:04:13:f8:be:b9:9b:ad:7e:36:
20:0f:4b:52:5c:86:fa:80:24:e4:12:75:b6:48:07:
fc:eb:90:db:fb:90:b6:b7:1c:8b:64:c8:e5:6d:32:
de:41:00:b5:1d:8c:29:fc:7b:4c:2a:b0:56:9c:b9:
76:94:44:7f:b5:69:3a:5f:91:22:7c:a2:97:73:d2:
d2:77:b7:93:a4:f2:3b:2f:eb:d6:32:81:92:66:d7:
74:b2:78:06:1f:54:df:9b:0b:01:d3:31:06:85:f9:
82:32:99:0b:9b:62:f4:17:99:db:c1:eb:42:cc:e0:
e4:1c:19:d3:37:87:cd:07:6c:81:2a:c2:87:c4:6c:
5c:56:28:90:5a:11:06:a8:7e:60:51:5e:85:4f:56:
20:9e:ee:26:16:fa:86:11:87:c5:a9:bc:6e:c2:85:
ab:e8:07:06:75:27:56:55:ec:a4:2d:de:7a:99:57:
f7:94:f6:c6:25:68:25:b1:a9:42:f8:9e:b8:c6:41:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.171.0/24
93.113.129.0/24
185.84.67.0/24
185.162.228.0/22
185.193.12.0/22
IPv6:
2a0a:3440::/29
2a0b:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64480
207092
Signature Algorithm: sha256WithRSAEncryption
76:e3:8f:2a:71:e7:54:40:58:54:20:f9:f1:33:62:74:28:07:
d4:28:0e:a5:bf:55:98:5e:22:74:05:20:a3:85:68:6d:2c:92:
f5:9e:67:62:a4:7f:96:9b:33:be:93:c4:25:3c:90:1f:0c:ba:
25:eb:4b:37:3d:a1:2a:c5:30:65:0d:9f:12:c5:02:dc:b8:2d:
be:2e:f7:12:ef:ed:ec:83:ab:d1:a0:0b:97:b7:ac:40:f3:c7:
64:6a:09:6e:6e:b6:da:50:eb:33:f1:ab:cd:7f:a9:12:d7:de:
a9:1f:f2:3b:d4:46:a6:c5:2c:6c:52:fe:bf:3b:a0:46:6f:89:
f4:38:13:94:fd:a3:f8:ec:f3:b7:a0:2f:12:04:f0:7e:5d:1e:
83:84:be:bd:19:cb:06:6d:d0:57:2b:a6:70:f3:74:52:71:7f:
48:68:73:a8:10:a2:88:0f:90:83:cc:c6:ac:58:50:2c:47:2b:
1f:17:0e:e5:4e:89:37:27:70:03:44:21:c1:99:c2:28:88:02:
8c:4b:95:da:51:4d:41:7a:7c:b5:75:e4:49:c5:90:4d:d1:8f:
49:25:86:80:85:eb:2a:8a:d7:ac:e2:22:49:8f:2f:aa:27:20:
ff:19:9c:b2:25:f6:fe:03:05:8e:4c:6f:27:7e:6c:47:97:86:
3f:dc:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:34 2024 by rpki-client on console-fra.rpki-client.org