Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.cer (raw, json)
Hash identifier: bFulhfcLVH7T6H/U0q6GogzVC1EmxF9JWzCGNyL3Hko=
Subject key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010A920543651AD1C339B566881CB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57295
IP: 2001:67c:2ba8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0a:92:05:43:65:1a:d1:c3:39:b5:66:88:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:88:57:d7:2d:51:19:42:78:d0:ff:4c:68:
76:84:85:b4:58:b0:d4:4b:95:9b:88:f3:1c:cb:ca:
aa:8e:c5:fd:b8:67:5f:a6:03:e6:60:26:fa:72:e8:
b1:28:70:4d:c4:81:c5:79:1a:d1:0e:1b:55:ba:47:
a6:13:c7:ce:a9:df:d8:85:b0:c0:68:7c:68:52:69:
55:be:87:09:d0:e3:57:1d:ad:12:a8:10:17:b1:be:
42:0f:8a:24:ff:bc:6d:b1:43:e6:2a:c2:4a:43:0e:
97:5d:9c:68:cc:8c:e0:3b:ba:11:21:2f:6f:73:e8:
76:54:cc:9e:8f:0b:a8:48:db:b4:d2:81:71:25:41:
e9:14:73:19:1e:ae:61:a6:c6:b6:aa:10:80:69:79:
c7:8e:23:0e:90:19:e8:0e:14:8d:a4:42:cd:86:f4:
27:57:39:01:64:a3:b9:b9:20:59:c6:6a:0a:a9:b7:
5c:01:f7:96:45:2f:be:b3:d1:02:df:d4:e0:09:1f:
7d:47:b0:80:62:0f:59:5a:72:8a:f0:40:b8:f2:bf:
82:9b:63:61:18:81:f6:59:81:10:de:38:e2:9b:ae:
d0:e0:a2:3a:72:74:d5:d9:c9:b4:b8:30:b7:66:2c:
ae:62:c6:a8:28:66:a0:70:27:f1:7c:35:f0:3e:cb:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ba8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57295
Signature Algorithm: sha256WithRSAEncryption
aa:51:62:60:64:15:ac:f4:43:56:a9:36:9b:fe:93:ef:e2:ca:
9b:47:73:d3:c6:87:be:18:3b:90:9f:e4:b2:a4:12:a2:c5:7d:
5e:c0:bc:27:0d:4e:b0:72:76:6f:8f:42:35:6c:50:ae:f2:3c:
05:10:bc:30:35:54:13:3d:78:38:8c:e5:4d:8f:e0:68:c6:04:
7b:4b:fd:26:42:dc:b2:ba:67:df:05:60:b0:47:aa:8a:eb:83:
b2:0b:a1:f8:72:ef:f2:c6:d0:17:96:27:c0:ea:a1:a4:2d:52:
a8:c3:22:91:2e:31:57:b5:e4:1f:d7:7b:c9:1d:d2:67:84:85:
6e:d8:2b:bf:49:d3:dd:01:8d:6b:17:ba:96:96:42:6d:60:5d:
ac:7e:76:b3:e7:d1:e3:13:0c:7c:eb:df:cf:4b:a6:cf:68:59:
fd:66:61:55:43:2a:49:5d:18:96:3a:1e:63:b9:09:12:e8:ba:
22:1b:0c:ee:0f:5a:80:c6:07:03:22:44:ca:b8:eb:04:20:4b:
7b:08:91:c7:8c:a5:60:9d:41:76:57:3b:0d:9d:84:7e:2f:fc:
e4:ae:c7:25:a3:4c:c6:5a:50:b1:0c:ea:17:00:96:9a:be:b2:
4d:0d:dc:b5:a9:43:75:67:de:62:54:6d:a4:34:ed:6b:0e:60:
30:07:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:39:11 2024 by rpki-client on console-fra.rpki-client.org