Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer (raw, json)
Hash identifier: p4NR/VotXoZp3B81ZqP6QuJPtt7XdIK+HihQsUOn3S4=
Subject key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794A90B48D112A6F9B263B06BAEBBB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.65.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a9:0b:48:d1:12:a6:f9:b2:63:b0:6b:ae:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=594b79990f616a8344c860148fc922910e154dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:a1:36:e5:fd:cf:82:7a:43:51:78:a9:90:
96:65:ed:bb:5f:61:1c:37:91:97:72:bc:b9:58:13:
58:77:2d:22:6a:d2:ee:42:25:97:24:fc:fa:be:65:
f9:65:90:a9:41:0b:f3:47:77:25:ce:cb:ad:a6:3a:
5f:ba:70:c8:56:13:79:7e:ca:5a:8a:4a:19:84:61:
a3:ae:94:34:00:72:f6:fe:ae:6a:db:f0:8c:c1:b9:
0a:0b:58:bc:88:98:25:97:4c:63:40:bc:10:6d:d8:
ab:fa:7a:19:33:09:03:de:63:30:c3:9e:55:f5:d8:
58:5d:55:0c:4d:d2:07:5b:a4:1a:ab:fc:db:37:ed:
5e:27:a5:a7:a4:eb:f6:b8:06:64:2c:6c:09:47:90:
9f:74:95:da:dc:91:6e:6e:5c:9d:e9:72:18:96:b8:
f3:9c:97:19:86:b9:70:e5:43:55:82:6a:4e:7c:9c:
69:a5:1f:ce:60:3d:68:7d:e1:b7:ba:6b:44:98:34:
e3:32:c8:33:6a:79:5a:4c:72:cc:0e:d5:62:6a:f4:
c3:8e:ca:f4:5a:45:8a:0b:6b:42:3a:8c:15:8d:e7:
c0:66:5c:a5:59:16:63:62:ef:83:c0:c1:20:be:18:
80:cd:35:d0:3e:8e:a6:29:3e:8b:5c:81:b5:07:f3:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.65.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7d:67:1a:33:a2:4d:18:a8:d3:44:a5:1a:9d:49:ba:5b:64:
8e:ac:26:ac:07:9f:b7:58:33:9a:72:58:a0:d6:ca:3c:ad:25:
93:3b:e3:11:e7:f3:07:cd:e4:bc:03:86:64:ef:46:6d:4f:77:
71:fa:1b:41:18:fa:85:84:3a:ff:aa:d8:1f:bc:fc:c6:2b:5d:
1c:75:03:74:6d:cb:0f:0c:ea:7a:58:24:4f:e5:da:d2:b7:2e:
25:48:d5:97:a3:c5:d6:50:b5:72:2a:a2:b5:55:9b:66:75:95:
39:d1:75:9f:75:28:20:b2:7c:66:c6:ce:09:72:3e:0b:2b:75:
4f:46:9d:dc:b1:95:c1:63:6d:4b:a9:72:c0:a9:01:72:b9:d6:
ec:49:23:2d:26:5c:7c:66:c2:de:2a:6b:e1:90:8f:2f:fc:5b:
38:b1:d0:e9:55:b6:de:84:d5:24:d3:41:39:03:86:8d:06:35:
1a:55:27:c7:80:0b:e7:da:8f:c9:29:95:be:0a:fd:25:8e:2f:
74:d0:de:29:56:af:07:ed:b0:d2:6a:f1:b8:2f:21:aa:42:f3:
16:e3:3a:d9:45:c2:13:b7:53:f2:ec:df:0d:16:29:43:32:d5:
fb:51:17:36:0f:00:bf:cf:79:c3:6f:34:a8:c2:2e:d8:f1:cb:
76:e2:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:44 2024 by rpki-client on console-ams.rpki-client.org