Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
File: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer (raw, json)
Hash identifier: 8CrwtKHGqsIOSIHW2P3OVdP0h+6iPGlauLs5KGNiqb4=
Subject key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80159B957FC8CF4FB6F9EDE305558F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209835
IP: 83.143.108.0/22
IP: 2a05:eec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:59:b9:57:fc:8c:f4:fb:6f:9e:de:30:55:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58f7d27ebc269bf14b8d6895791affd429f70222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:5d:04:ec:20:62:f7:cb:0a:ee:9c:26:0c:
dd:3c:18:08:4d:b3:e8:d4:13:23:07:f6:1a:63:7d:
2b:b7:d3:bb:63:58:b1:cf:14:f9:4d:c6:1d:ee:0a:
1b:5b:dc:4d:71:14:e8:5d:e3:b2:fa:4f:3d:3d:97:
1e:e0:4f:1c:af:2e:48:8c:10:6e:ab:a2:0a:29:15:
ce:c1:96:2c:55:38:a5:2c:80:f5:97:50:22:cc:4c:
ff:4c:2c:4a:d6:23:9b:a5:62:2a:c4:e2:81:a8:45:
a8:33:dd:18:4e:d9:0d:d4:07:29:cc:0e:c4:8c:ce:
06:a8:7e:d6:59:1c:27:2d:21:78:e4:79:09:db:d8:
a7:fa:a4:f8:d0:0d:11:2b:00:52:66:37:19:fa:45:
81:f5:3e:4f:af:fc:c4:87:cc:de:6b:fb:96:03:15:
a2:86:b9:02:45:21:25:fd:54:6a:81:20:e4:49:3a:
28:c1:60:b4:c4:ca:a8:07:bb:2b:b0:36:9d:26:e0:
da:24:67:d2:c8:0a:9d:93:bd:ed:bb:f3:9d:34:9e:
80:9b:a2:0e:7b:c1:ea:89:2f:e8:6a:77:fb:12:0f:
22:08:ac:06:1a:7c:c0:1b:3f:31:4e:38:1d:03:af:
cf:a1:e6:dd:24:c7:c3:86:cd:8a:f0:77:7d:08:d9:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.108.0/22
IPv6:
2a05:eec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209835
Signature Algorithm: sha256WithRSAEncryption
18:55:84:64:33:53:7f:a6:5a:bb:da:57:39:0f:e4:06:79:1a:
8d:81:59:ad:01:5e:bb:db:a8:db:c7:d6:05:12:31:f3:ca:67:
c3:9e:0f:78:45:e4:81:ec:d8:70:28:50:3d:3b:b2:88:64:5b:
b1:64:35:dc:8e:f8:6b:a3:d8:50:d5:1e:d9:86:64:08:d1:14:
5f:d8:b6:5a:93:7b:06:17:70:9a:e6:9c:b8:13:de:1c:05:13:
2a:59:d7:48:ef:56:7a:dd:9d:aa:3a:97:03:ab:fd:41:61:61:
7f:9e:9a:5f:89:85:77:d7:b5:3a:3b:f1:a8:e9:85:4c:7f:48:
3d:26:1e:6e:a6:b8:18:5d:bd:54:a6:6b:de:81:b9:f4:45:cf:
ce:ba:03:30:11:73:2a:21:5f:1e:1e:fd:d1:34:61:44:79:1f:
60:ec:4a:ec:f8:24:66:ff:71:5d:b5:f1:6a:aa:e5:ac:a7:3b:
39:d5:c8:31:4c:13:62:c9:5b:e7:04:d0:f3:93:23:2e:12:24:
c1:69:84:38:be:a3:88:2e:34:9a:28:72:ae:f8:c0:47:9a:86:
b1:d0:d5:50:e5:49:25:e7:02:c0:d1:94:83:e7:fa:c4:1c:0f:
17:8a:5a:f0:a2:eb:54:00:71:ac:08:8d:7e:de:f7:4c:44:78:
d8:f5:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:35 2024 by rpki-client on console-fra.rpki-client.org