Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer (raw, json)
Hash identifier: xJhTiItXlpvY8f2fk8hjlM0sAUdsV+K4tPwgsLmtlls=
Subject key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E633F7E7C63A8BB2B7CD35812369A8DB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Mar 2024 23:01:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.36.147.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:3f:7e:7c:63:a8:bb:2b:7c:d3:58:12:36:9a:8d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 23:01:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:e8:67:fc:54:2e:fb:1c:82:18:a8:12:8f:
72:09:a9:1b:ae:0e:9c:7f:d7:c7:bc:4a:82:c4:46:
aa:23:30:eb:a8:42:49:9d:e9:f2:aa:fb:ee:95:45:
e2:ce:c7:ff:c2:0c:22:93:54:1b:29:14:46:fa:e9:
ff:df:dc:52:0c:2e:5f:c6:13:55:cb:e6:52:a3:b7:
ec:fb:4b:d8:62:16:34:e0:ce:a3:68:6a:bc:ea:3a:
63:ba:c6:f9:bf:5d:0f:79:90:37:65:64:0e:c7:75:
14:17:fe:2a:88:0c:d6:56:51:a4:73:0a:2b:05:2d:
07:db:aa:5b:49:f3:e7:4e:98:db:cc:2d:a0:14:fb:
cd:b0:53:18:6c:2b:b8:2c:c8:7d:5d:e1:39:35:04:
de:6b:90:0f:27:38:c4:a0:92:84:9b:a1:72:b4:86:
19:f1:11:f2:ae:cc:bd:a0:cc:32:9d:42:b1:4c:83:
27:21:bd:f4:9c:62:44:23:6d:01:dc:55:5f:0f:3d:
6e:a9:fa:75:f2:af:43:b3:d5:23:7d:82:44:2a:c9:
b2:67:d2:20:4b:fd:09:1f:80:8a:5c:7c:ff:7e:dd:
a2:a3:fb:10:86:f9:a0:1a:32:3e:97:a1:8c:50:68:
70:07:64:f4:12:09:45:33:d5:05:13:8b:be:f6:2a:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bc:52:9b:ba:41:50:ef:ef:82:4a:92:85:46:7c:9c:d3:a1:
2c:e3:19:06:ad:0d:48:a2:ec:22:e0:a7:74:9c:f4:4d:e6:ab:
a3:39:b0:07:3b:41:d6:76:bd:9a:fb:61:06:c2:be:43:d7:d5:
df:df:7c:5e:a4:92:e9:01:6c:4b:0d:67:77:68:40:1e:c1:9a:
24:dd:1d:1c:cb:26:a8:a4:df:f6:a2:19:22:01:92:f0:61:cf:
60:dc:a5:ad:cf:6f:71:1b:6a:ea:f5:01:f9:fa:d9:64:8b:89:
35:31:f8:b1:28:66:cd:7a:4f:4e:8c:97:91:02:de:a3:50:42:
70:da:35:40:50:dc:37:40:a4:c8:c2:6b:59:98:00:42:9e:e5:
2b:64:a0:bd:de:5d:83:c8:92:7e:6b:c1:bd:c1:93:5a:43:8e:
c2:93:7f:ee:a2:95:cb:21:c4:cc:91:b1:d8:61:a1:f8:43:4b:
00:23:a6:18:98:e9:69:ca:f2:b7:ab:7b:e6:3d:4e:e8:65:16:
85:af:81:17:1b:dc:42:d6:bb:d7:08:5a:29:98:03:ed:a7:30:
fc:e1:83:b1:f8:c7:57:eb:1a:fe:9b:41:4f:6f:72:3a:94:be:
1c:eb:e2:15:e2:5f:6f:ef:9b:94:1c:02:69:2b:d8:1d:b2:48:
6e:49:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:45 2024 by rpki-client on console-fra.rpki-client.org