Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
File: WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer (raw, json)
Hash identifier: /YhZvyZkPX43/rIHlcC+eyfPfF9AlM73ztcDV8G4vHQ=
Subject key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF0E686B5C3044E33780EA6F79B91B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210869
IP: 45.13.68.0/22
IP: 2a0e:df00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0e:68:6b:5c:30:44:e3:37:80:ea:6f:79:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:4c:a3:d4:e3:ef:71:ed:2f:d6:22:18:ac:
29:0e:a3:7c:92:88:09:f3:e7:94:9d:d9:bf:e7:b6:
f6:05:5b:86:d4:48:53:f1:8b:2e:d7:ed:bc:f9:d1:
e7:89:ac:91:89:f8:6e:84:31:28:88:7e:94:7d:6d:
b6:81:91:e9:88:40:a8:4b:04:14:f6:23:8f:0e:3c:
80:bb:c7:eb:dd:18:c3:83:e3:e5:f7:53:f2:b4:ab:
10:2a:6d:38:e5:e7:8e:eb:a6:6f:72:d2:09:86:a7:
f8:0b:c7:e2:0f:78:c4:6c:1f:6d:ab:e8:2e:a4:78:
e4:1a:4d:26:c1:65:99:8b:8e:ee:4e:50:76:e5:02:
ab:a2:17:c6:27:dd:72:75:07:2c:ba:02:48:d8:c7:
9d:a9:ce:a4:58:7b:66:cd:36:01:18:8f:c8:6c:57:
e1:c7:1e:52:07:75:6e:bf:9c:87:de:ba:75:36:22:
d6:33:8b:e0:e1:17:e3:ae:2b:96:e4:32:39:46:e5:
bf:25:ab:32:5c:74:08:be:54:ef:b7:a0:8b:78:14:
f4:e8:99:ea:5b:c6:58:46:28:c8:9b:82:3c:f0:d2:
86:ed:03:0b:0f:e3:81:b4:ff:78:49:82:02:3f:86:
25:81:43:e9:8b:78:48:68:96:9d:69:71:3e:bd:5d:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.68.0/22
IPv6:
2a0e:df00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210869
Signature Algorithm: sha256WithRSAEncryption
39:d5:4c:3a:cb:6b:ec:fb:1b:7c:bb:40:d3:92:13:85:a5:e2:
c7:2e:2d:18:b1:a2:ac:bf:be:02:0d:62:e7:a9:3a:00:72:dc:
98:3f:ea:5f:e1:d3:9d:5f:7f:82:c3:84:68:36:e1:02:47:a9:
de:53:55:11:b9:21:82:6d:79:ca:2e:09:a8:db:82:21:41:c6:
10:1c:79:9d:20:20:f2:15:45:21:09:2a:af:f5:a5:06:71:7c:
94:d1:2f:f0:cf:6e:4a:37:f4:5e:6d:37:20:5f:4c:57:f5:4a:
c1:1b:c9:44:51:de:ff:b8:fa:40:9a:32:98:d4:15:ed:00:f4:
57:ba:21:92:0d:78:b6:a0:28:ab:68:81:68:84:df:c3:9c:b4:
5a:e6:55:aa:5f:e6:e2:0a:ee:df:30:0d:22:01:20:78:49:73:
4e:77:54:1d:a1:5e:d9:be:df:08:87:50:95:dd:e5:aa:8a:98:
59:a7:67:d7:5c:11:25:e7:1b:f3:44:c5:2b:72:83:61:01:12:
e2:5f:6c:11:ee:e3:f8:58:da:5d:ad:2d:cf:31:eb:ed:0a:64:
be:e1:86:62:8a:4c:11:f6:4e:57:9a:77:14:d4:5b:1e:b6:c5:
b2:d1:23:c7:3e:37:9f:01:d4:15:46:48:e7:01:54:14:5a:66:
da:dc:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:46 2024 by rpki-client on console-fra.rpki-client.org