Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
File: Wc4cxXrNTYGB7TBThd7njbF14iE.cer (raw, json)
Hash identifier: 0w31LatfJWGdaAGObodDy3ltN9Adnh7xxqbrB/+m9EU=
Subject key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801D95819C3E2D99F769C69AC727609
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205254
IP: 46.161.192.0/21
IP: 185.255.44.0/22
IP: 2a0c:58c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d9:58:19:c3:e2:d9:9f:76:9c:69:ac:72:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ce1cc57acd4d8181ed305385dee78db175e221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:86:ad:fd:d7:a3:72:ae:79:ba:a2:c9:85:
a8:c6:17:ee:1d:30:4b:2e:4f:d3:6b:0f:a1:1c:e6:
ed:13:4f:d4:1a:cf:d5:e6:e5:49:61:5e:ca:1b:b3:
6b:19:47:39:20:15:6f:c0:63:fd:68:fe:65:c9:6b:
94:5b:cf:19:26:78:56:d9:4c:f8:d1:70:ab:b9:a1:
29:6d:36:bf:56:e0:da:14:8f:33:1b:56:11:fe:d0:
40:6e:5d:10:26:44:79:4c:a3:ff:5a:49:15:b8:db:
f1:86:8b:fd:bf:d4:23:62:35:fb:52:fb:67:8c:de:
af:1e:a4:9f:7e:03:bf:d4:a8:08:f7:9d:8d:2a:b3:
70:36:ee:f0:79:cc:21:b9:a1:fa:d3:5e:ae:cf:1d:
66:8b:de:93:68:4b:5e:4d:37:68:da:2d:1e:d7:c6:
41:96:d7:94:90:a7:c6:e9:3e:e0:ca:c1:f5:28:9a:
d5:73:31:18:22:58:ad:56:d5:96:85:93:c4:ac:5d:
d4:d5:ac:8e:9c:d4:32:b0:61:03:61:8d:1e:04:d5:
6e:5c:18:da:16:7e:22:66:3d:6e:6b:3d:d5:fd:ce:
91:95:17:b9:37:3d:cf:69:ab:58:d5:ef:21:97:21:
1f:d8:00:23:cc:c4:74:3d:55:db:63:70:d2:ad:66:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.192.0/21
185.255.44.0/22
IPv6:
2a0c:58c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205254
Signature Algorithm: sha256WithRSAEncryption
37:76:ce:fe:69:14:48:00:78:cb:2a:8d:e6:37:ae:2d:64:b2:
78:a7:68:62:8b:32:04:a4:33:fc:81:2e:93:56:f0:2c:13:ad:
f7:be:80:be:bc:a0:9b:1f:e0:2d:bd:85:da:c6:e4:77:50:51:
f5:b8:fc:78:d3:32:11:bd:23:d2:68:0a:76:5d:1d:fc:5c:47:
f0:7f:cf:47:19:9d:5c:b3:d4:f0:18:b9:8e:de:d7:b4:ea:1a:
6e:e9:fc:e5:80:e4:e8:83:61:4c:21:32:10:29:7c:45:76:17:
9a:63:d9:22:48:b7:cb:35:2f:a8:d8:c0:30:90:b0:66:cc:cb:
78:69:9a:63:93:70:93:48:60:37:c5:e0:29:ee:fb:cf:6b:18:
ee:a5:93:fc:29:02:cd:b6:4c:3a:83:97:81:15:41:b8:d9:b4:
a8:8f:04:7d:7a:1d:fc:bb:47:80:69:ea:34:8f:20:12:c9:b6:
29:68:5c:03:01:f8:e9:bb:40:1b:7c:83:e8:31:cd:c7:09:a4:
ae:6c:ab:36:ad:58:ae:12:e2:d3:1c:70:88:0f:5b:25:a6:d4:
f1:f3:a7:59:dd:33:13:bf:f2:a1:43:ef:ff:13:09:76:de:fc:
4a:8d:45:a2:4c:1e:0a:5b:ab:7b:6c:d9:ea:d7:48:9d:83:fc:
62:c3:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:46 2024 by rpki-client on console-fra.rpki-client.org