Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
File: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer (raw, json)
Hash identifier: wJABE1uwfGjlfyLFEC7/BH/WlnH7OVQq4L3mxoPFURo=
Subject key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244569AE3B8DFB581471FCC174398EA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35710
AS: 52038
AS: 61381
IP: 45.84.32.0/22
IP: 91.132.200.0/22
IP: 185.168.151.0/24
IP: 193.111.100.0/22
IP: 2a09:d180::/29
IP: 2a0e:9580::/29
IP: 2a12:13c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:69:ae:3b:8d:fb:58:14:71:fc:c1:74:39:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:23:ec:21:9a:2c:fb:53:68:95:0a:fd:56:
c4:45:64:1f:29:5e:9b:5e:b5:80:8f:49:09:66:54:
8d:c5:8b:b0:4f:90:31:6c:b3:be:9c:fd:fb:ca:1b:
c4:99:d5:f7:d0:cb:e5:46:cb:60:fd:b2:a7:b6:28:
2c:6b:75:a5:c3:5e:01:79:b2:ae:eb:7a:74:a3:c4:
14:7f:67:92:9b:d2:46:33:9f:ec:08:ca:27:57:13:
f5:65:9d:d8:ae:cf:3a:09:d9:28:93:6a:fe:f0:c2:
8c:e4:56:d9:d9:4a:1e:a5:61:72:f3:9e:2d:a0:92:
e8:4a:b2:4e:21:ba:1d:8d:94:94:b4:93:f6:1b:e6:
22:b1:4a:f1:90:a8:2a:ba:ea:d5:e9:1d:38:24:7c:
08:1c:ca:80:41:0f:b7:86:80:00:18:e6:39:cc:c6:
81:91:3f:3f:65:37:bc:48:6c:8f:34:da:34:8f:35:
28:fc:af:b6:08:44:7f:0b:89:20:78:d2:0a:10:b4:
ec:d1:27:39:78:42:f0:30:d8:04:f6:2e:4b:e1:dd:
d8:18:55:86:f9:97:6d:62:83:ff:75:4a:d2:da:53:
94:04:90:d7:d3:6b:24:24:ed:3b:a3:42:79:93:ab:
93:bd:6e:00:38:e9:d6:b1:d0:f4:f3:89:09:6a:28:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.32.0/22
91.132.200.0/22
185.168.151.0/24
193.111.100.0/22
IPv6:
2a09:d180::/29
2a0e:9580::/29
2a12:13c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35710
52038
61381
Signature Algorithm: sha256WithRSAEncryption
6e:a9:ed:9e:b7:b7:9d:2a:2a:ea:31:22:16:d1:d4:19:f6:a4:
0e:ab:95:84:5a:73:ea:7f:2e:c3:f4:3f:fc:b9:b8:5d:a9:b6:
9b:90:f3:64:d2:55:2d:b8:c8:2a:bf:26:4a:88:e5:64:d1:da:
8b:75:06:2d:b9:7d:51:40:02:19:a2:e4:c5:28:8f:53:22:79:
d3:3a:6b:aa:24:d1:d0:ba:9c:bb:89:a5:54:66:55:af:c4:92:
c1:42:55:1c:d8:6e:e9:52:3a:aa:e7:5e:b6:8b:26:78:aa:e4:
7e:73:71:2e:fc:dc:79:cc:c6:e6:00:47:43:11:10:18:ab:f3:
42:8f:61:53:e9:7d:fc:6b:60:41:b5:aa:b3:2a:cf:71:5b:57:
d0:af:75:86:45:7c:4f:04:20:e8:72:ea:06:29:7c:11:12:1f:
e6:99:b1:30:e8:1b:6f:23:a6:52:09:b4:f0:18:0e:c6:46:b7:
73:9a:e6:fb:64:a5:b9:7d:81:dc:42:4b:0b:a3:b8:70:29:d3:
1b:65:c5:69:1b:c7:6f:bc:6c:38:a3:48:c6:34:6e:d3:e6:de:
be:24:5d:88:07:1c:73:a9:9e:82:93:6e:97:64:ad:48:e6:8e:
2d:de:7f:b6:86:0b:1d:60:b1:16:13:38:7e:33:63:23:f2:30:
35:d5:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:00 2025 by rpki-client