Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WWOOE7WfyukUF-An2xPpFSmPW74.cer
File: WWOOE7WfyukUF-An2xPpFSmPW74.cer (raw, json)
Hash identifier: YNXMmIRfbVL2ZN2c40ETHeVTNb6ySvc0eHwO4SEvQVc=
Subject key identifier: 59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C9F382513185DFD70A2A83658CEC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/WWOOE7WfyukUF-An2xPpFSmPW74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.41.39.0/24
IP: 2a12:4240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:9f:38:25:13:18:5d:fd:70:a2:a8:36:58:ce:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59638e13b59fcae91417e027db13e915298f5bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:76:ee:d8:8a:3f:bf:97:20:0a:81:be:3f:
f7:74:4a:3e:ef:77:17:fa:a4:12:3e:b4:55:1a:3b:
2c:a2:f9:78:10:4e:f8:90:09:19:2e:07:62:23:4e:
ea:25:8a:a4:8f:ec:82:8f:bf:4c:b1:fe:ac:70:80:
22:94:52:7a:ce:52:aa:e7:08:76:d8:52:19:98:f3:
a7:1d:03:17:79:a7:07:36:a3:d8:ae:37:7d:ec:cc:
31:9d:f6:16:c2:44:d3:11:9e:6a:04:5b:7d:87:db:
08:5a:84:68:a5:44:6a:bd:01:fd:5d:eb:58:74:5f:
eb:ec:8d:b5:c7:3f:62:5d:39:16:07:71:5c:ab:a4:
d2:eb:ae:39:21:d1:00:95:18:94:4a:85:cb:3c:72:
25:9e:28:b8:42:cf:a5:09:06:73:0e:75:00:93:68:
df:b5:95:11:17:7b:1d:4d:10:e5:35:08:7b:17:6f:
e1:c3:f2:dd:3b:98:ab:62:4d:33:e7:a5:71:37:77:
b1:78:3c:8c:d1:c7:79:d4:44:25:60:97:46:b8:c5:
81:87:68:92:dd:80:49:cf:5e:b5:3b:ae:22:90:5e:
89:c3:68:7d:ae:a5:1d:42:0b:55:b4:b4:e8:dd:8c:
2d:fd:d3:e6:2d:7d:eb:46:d9:07:fd:0f:9e:ad:a4:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/WWOOE7WfyukUF-An2xPpFSmPW74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.39.0/24
IPv6:
2a12:4240::/29
Signature Algorithm: sha256WithRSAEncryption
a8:ee:42:84:3a:3b:7c:5b:9a:ff:cf:08:8c:a6:06:f8:37:f1:
8c:eb:81:17:dc:44:02:8a:48:e7:fb:d3:06:b7:51:56:ac:82:
3d:d3:a3:55:23:fc:09:8f:d4:ff:31:12:44:41:3e:da:5b:08:
4a:7e:ac:9a:57:fd:a4:92:c3:54:4f:e7:06:22:6d:0a:e0:0d:
19:ce:14:46:b8:02:13:d3:5b:e3:58:fc:b5:b1:da:f7:f8:d0:
b8:95:9e:17:ce:bc:a0:e8:70:21:42:27:49:1c:ba:96:0b:0b:
99:f0:a6:d9:7c:ea:fa:e7:81:b6:a4:42:c8:03:a5:8a:4d:29:
8e:30:d0:e6:96:eb:b8:b2:53:34:50:fa:05:b0:1b:d8:62:f1:
19:c8:28:33:fd:f6:f4:34:97:9a:39:8b:54:bb:41:a2:d9:ef:
f7:9b:dc:8e:ed:8a:53:20:fc:ce:39:dc:f4:41:72:08:62:2f:
55:e5:0b:4f:f2:e6:18:2a:5f:af:e9:d9:93:53:2c:a1:de:fa:
41:af:00:e2:c8:09:9e:55:cf:67:e3:8c:7e:af:fb:da:f9:e7:
ed:74:87:13:8d:60:94:59:bf:aa:c5:3b:fe:26:32:75:f1:78:
33:80:c2:bf:92:58:9c:48:46:19:d5:10:3f:01:ea:1c:c5:e3:
43:75:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:39:07 2024 by rpki-client on console-fra.rpki-client.org