Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
File: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer (raw, json)
Hash identifier: 9zjd3S8Z2p7SzAgk3WzdEHQ+XlH5JFf/oepPtLovW6o=
Subject key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF51E62EA340644FB798E20F0DECA321A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 06:49:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35710
AS: 52038
AS: 61381
IP: 45.84.32.0/22
IP: 91.132.200.0/22
IP: 185.168.151.0/24
IP: 193.111.100.0/22
IP: 2a09:d180::/29
IP: 2a0e:9580::/29
IP: 2a12:13c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:1e:62:ea:34:06:44:fb:79:8e:20:f0:de:ca:32:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 06:49:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:23:ec:21:9a:2c:fb:53:68:95:0a:fd:56:
c4:45:64:1f:29:5e:9b:5e:b5:80:8f:49:09:66:54:
8d:c5:8b:b0:4f:90:31:6c:b3:be:9c:fd:fb:ca:1b:
c4:99:d5:f7:d0:cb:e5:46:cb:60:fd:b2:a7:b6:28:
2c:6b:75:a5:c3:5e:01:79:b2:ae:eb:7a:74:a3:c4:
14:7f:67:92:9b:d2:46:33:9f:ec:08:ca:27:57:13:
f5:65:9d:d8:ae:cf:3a:09:d9:28:93:6a:fe:f0:c2:
8c:e4:56:d9:d9:4a:1e:a5:61:72:f3:9e:2d:a0:92:
e8:4a:b2:4e:21:ba:1d:8d:94:94:b4:93:f6:1b:e6:
22:b1:4a:f1:90:a8:2a:ba:ea:d5:e9:1d:38:24:7c:
08:1c:ca:80:41:0f:b7:86:80:00:18:e6:39:cc:c6:
81:91:3f:3f:65:37:bc:48:6c:8f:34:da:34:8f:35:
28:fc:af:b6:08:44:7f:0b:89:20:78:d2:0a:10:b4:
ec:d1:27:39:78:42:f0:30:d8:04:f6:2e:4b:e1:dd:
d8:18:55:86:f9:97:6d:62:83:ff:75:4a:d2:da:53:
94:04:90:d7:d3:6b:24:24:ed:3b:a3:42:79:93:ab:
93:bd:6e:00:38:e9:d6:b1:d0:f4:f3:89:09:6a:28:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.32.0/22
91.132.200.0/22
185.168.151.0/24
193.111.100.0/22
IPv6:
2a09:d180::/29
2a0e:9580::/29
2a12:13c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35710
52038
61381
Signature Algorithm: sha256WithRSAEncryption
06:e9:b7:76:3a:8e:a7:35:1f:0d:b8:c7:5d:b3:83:6f:22:42:
1f:8d:41:3c:f3:6a:e0:c1:13:14:5c:0a:65:fe:eb:f4:64:1a:
6d:e1:9d:3e:da:20:d3:c3:de:3e:43:2d:d1:e0:32:1a:0d:93:
e8:80:d8:57:47:eb:2b:58:0d:25:7a:e1:92:7a:77:5e:26:3f:
19:f9:18:1c:b1:28:b0:73:f9:f8:59:9e:13:74:eb:22:21:fa:
a7:6d:63:53:37:c7:d1:93:e7:f2:87:bf:5d:28:c7:2e:c0:85:
77:db:7c:65:3c:23:ae:4e:58:1d:19:42:85:6a:7a:08:44:8d:
76:58:76:45:8b:34:6f:36:49:69:b9:2b:a0:de:36:27:2e:ee:
1a:46:06:d3:80:ae:71:e0:ac:c0:f5:d0:38:c2:a2:65:e7:45:
ac:c9:4e:c7:f1:0e:e2:b7:4f:43:b7:1d:20:87:aa:1b:4c:a5:
71:5d:0c:1e:b6:e3:23:19:3e:a1:7a:d5:ca:04:b9:ba:8c:3f:
db:22:e8:d9:2a:74:4e:51:1c:21:41:b6:61:a1:e4:82:f8:ed:
10:cf:d7:f3:e0:00:1b:1f:b6:e3:7a:ab:35:ed:f6:95:5b:d4:
7e:ed:dd:aa:2f:4d:69:12:56:a3:0c:8e:1a:8e:3f:4f:5a:c6:
3b:3a:3d:0e
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAY71HmLqNAZE+3mOIPDeyjIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDE5MDY0OTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTU0YzdiN2U2ZGY3NTc4NDY2ZDgyYjUyNzE1Y2IyMDlmN2YyMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswYj7CGaLPtTaJUK/VbERWQfKV6b
XrWAj0kJZlSNxYuwT5AxbLO+nP37yhvEmdX30MvlRstg/bKntigsa3Wlw14BebKu
63p0o8QUf2eSm9JGM5/sCMonVxP1ZZ3Yrs86Cdkok2r+8MKM5FbZ2UoepWFy854t
oJLoSrJOIbodjZSUtJP2G+YisUrxkKgquurV6R04JHwIHMqAQQ+3hoAAGOY5zMaB
kT8/ZTe8SGyPNNo0jzUo/K+2CER/C4kgeNIKELTs0Sc5eELwMNgE9i5L4d3YGFWG
+ZdtYoP/dUrS2lOUBJDX02skJO07o0J5k6uTvW4AOOnWsdD084kJaij8sQIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFFlUx7fm33V4Rm2CtScVyyCffyHFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2U0NWZk
MC1lNjliLTRlMzItYTQyNy04YjEwNTJmZmNmNmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZTQ1ZmQw
LWU2OWItNGUzMi1hNDI3LThiMTA1MmZmY2Y2ZC8xL1dWVEh0LWJmZFhoR2JZSzFK
eFhMSUo5X0ljVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF
BwEHAQH/BD8wPTAeBAIAATAYAwQCLVQgAwQCW4TIAwQAuaiXAwQCwW9kMBsEAgAC
MBUDBQMqCdGAAwUDKg6VgAMFAyoSE8AwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID
AIt+AgMAy0YCAwDvxTANBgkqhkiG9w0BAQsFAAOCAQEABum3djqOpzUfDbjHXbOD
byJCH41BPPNq4METFFwKZf7r9GQabeGdPtog08PePkMt0eAyGg2T6IDYV0frK1gN
JXrhknp3XiY/GfkYHLEosHP5+FmeE3TrIiH6p21jUzfH0ZPn8oe/XSjHLsCFd9t8
ZTwjrk5YHRlChWp6CESNdlh2RYs0bzZJabkroN42Jy7uGkYG04CuceCswPXQOMKi
ZedFrMlOx/EO4rdPQ7cdIIeqG0ylcV0MHrbjIxk+oXrVygS5uow/2yLo2Sp0TlEc
IUG2YaHkgvjtEM/X8+AAGx+243qrNe32lVvUfu3dqi9NaRJWowyOGo4/T1rGOzo9
Dg==
-----END CERTIFICATE-----
Generated at Fri May 3 10:19:28 2024 by rpki-client on console-fra.rpki-client.org