Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
File: WX_cXffB0EeLTfoykI2f-VgYrHg.cer (raw, json)
Hash identifier: y9b9FhXH3z6a/fD6VvG/ORu+r6b40/aEN1nzglFwRlk=
Subject key identifier: 59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9B9A07BDADD3C615F3A7A59EEE8BD20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.111.208.0/24
IP: 2a14:2380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b9:a0:7b:da:dd:3c:61:5f:3a:7a:59:ee:e8:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:19:87:7e:b2:da:a0:6f:fa:a6:ff:a2:8a:
42:61:20:90:1f:e5:91:30:6f:a2:f0:a9:67:5d:2e:
a8:b2:5a:97:12:73:d2:1c:2b:bb:fa:f5:36:ae:2d:
cb:c9:30:8a:f9:8e:44:60:dd:71:96:73:5e:5c:ff:
87:df:58:5c:63:48:0f:d6:84:86:7c:fe:8a:60:eb:
75:ea:6d:cf:a1:cb:03:8f:13:2a:b0:55:75:c7:2a:
e9:e3:00:75:ee:a0:4d:b0:dc:24:10:d3:bc:a9:64:
b3:a2:4a:ad:39:a3:0c:e1:df:be:1a:c3:c8:1a:e8:
96:3d:da:1e:21:1b:85:5e:b5:4a:f7:42:ef:34:41:
74:bd:65:26:58:08:82:fc:ab:81:87:8c:86:32:d2:
ca:bc:a4:3f:4e:3e:0a:5b:db:bc:0a:ce:64:0a:94:
fe:00:4f:2f:7a:d2:5c:3e:cc:4f:22:d8:a8:41:39:
87:ce:73:92:20:43:92:68:17:1a:be:16:79:c3:ee:
ed:fd:09:c0:33:e2:66:7d:0b:d0:4a:15:08:91:e7:
6c:8a:4e:f3:ef:3a:a7:07:b0:7f:47:50:ce:dc:f2:
93:a0:c3:83:37:00:74:2b:f6:d0:c6:86:55:8e:75:
9f:64:6e:aa:13:71:48:32:47:b8:5e:c4:8b:82:a6:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.208.0/24
IPv6:
2a14:2380::/29
Signature Algorithm: sha256WithRSAEncryption
0e:1d:7e:25:c7:80:27:33:e3:f0:72:ac:40:66:78:5f:19:e7:
99:58:9a:7c:de:e5:1f:10:1c:0f:38:ac:13:fa:db:a9:80:cf:
b9:83:bb:18:e6:45:92:9d:18:d8:6b:fc:d8:a7:f4:4f:8d:d1:
a2:a1:90:fa:c1:af:19:55:3f:61:2b:81:76:aa:89:22:64:87:
79:30:6d:3f:0b:eb:bd:ce:af:55:67:ad:c9:64:26:37:ff:d3:
05:c1:39:b1:e0:77:b6:78:a5:6e:89:08:6a:63:ce:a3:a3:6a:
3b:2b:9f:19:b3:cf:7b:ad:d7:89:15:fc:bd:e8:44:de:59:28:
9f:2a:1f:ad:af:ea:0f:04:59:7d:40:7f:be:b4:30:0e:9c:3e:
14:4e:ce:41:e7:8c:a0:74:c1:3a:d8:c3:c2:77:88:cd:b4:d9:
b0:8a:80:3d:bf:2b:15:a5:fa:ff:a5:f1:eb:5b:42:44:2d:50:
4e:d3:6a:5c:90:4c:36:7d:91:31:e9:2c:4c:f4:07:89:31:08:
92:fd:5d:fd:58:74:c3:13:69:82:e6:18:94:b5:88:ec:13:da:
dd:6f:78:4e:9c:ca:33:c8:19:a8:67:b4:6d:15:0e:ef:cb:7a:
42:2e:66:86:46:37:00:09:3d:4b:ca:b3:eb:b8:30:96:9e:bb:
5b:98:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:39:09 2024 by rpki-client on console-fra.rpki-client.org