Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
File: Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer (raw, json)
Hash identifier: ds0nKusw3gjh9BgyPiM7kIfMER3H7QnqMXlyhPKKuo8=
Subject key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190A7CC5B400F025E7BE16D2DF39A7449F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Jul 2024 16:35:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.196.74.0/24
IP: 2a13:c100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:cc:5b:40:0f:02:5e:7b:e1:6d:2d:f3:9a:74:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 12 16:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:e6:df:4a:75:79:fc:07:47:b1:1b:e2:c7:
0e:30:01:a5:08:75:eb:f8:07:6d:12:48:d3:08:8d:
91:b8:99:02:9c:e5:d1:b7:94:14:a5:de:a6:c1:8e:
be:14:87:82:8e:10:b2:3d:a6:2e:5a:1d:2b:75:0b:
3d:06:f4:5b:c5:c0:0a:bc:61:fe:ef:14:89:d5:d9:
99:bc:38:0a:a1:90:2e:36:e7:cb:cb:21:a3:d7:44:
c4:dc:11:79:96:da:bf:55:79:1c:9b:01:fa:31:fb:
71:a4:77:ec:da:4c:3c:a7:42:ec:e7:8b:63:47:aa:
56:e4:4d:62:f7:ce:43:7a:f1:c3:5c:0c:58:c6:36:
5f:ec:cc:d7:98:63:d6:1e:4e:d6:af:df:52:4c:8e:
2d:5b:14:be:d1:5c:83:67:a4:93:81:6e:d8:d8:c1:
99:88:e8:6c:7d:fb:12:a9:1e:a6:fd:1d:d1:fe:48:
0d:3b:84:2f:d4:a1:78:10:1a:1b:7f:28:aa:9d:a1:
34:8c:f0:16:85:d6:c2:6e:37:46:33:59:91:50:ca:
e4:6a:70:e0:db:ef:16:6d:b8:71:e7:05:84:63:06:
44:10:e0:a7:56:74:01:ab:9c:ff:d5:ac:24:d6:af:
c1:99:90:d2:2b:ad:43:b7:03:8c:e1:de:24:a1:ef:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.74.0/24
IPv6:
2a13:c100::/29
Signature Algorithm: sha256WithRSAEncryption
a1:24:24:fe:9d:67:a8:09:47:33:4a:04:20:37:63:84:c6:6e:
19:22:bb:eb:47:83:c2:84:99:5d:96:76:ac:c2:84:80:a4:a7:
92:c4:f9:b2:34:0a:f2:d8:d3:93:35:da:ae:2a:cb:08:fa:a2:
65:78:38:46:06:12:78:bc:a0:ca:f8:0d:00:d4:92:ea:b1:42:
72:f0:c1:50:96:c3:64:42:29:2f:49:56:e7:8a:64:c9:30:4a:
5b:ab:f1:50:51:fe:58:65:24:59:33:ad:35:4d:d9:01:93:58:
49:75:ab:ee:b0:5c:cb:1c:b4:5f:3b:73:a1:3d:3f:ae:38:25:
1a:13:35:c8:4e:24:e4:fb:6e:58:5f:2a:17:f1:0a:8c:ac:56:
d9:3d:65:e0:c5:ad:58:ba:d8:32:d6:20:ad:43:21:d1:ba:21:
ff:6e:a1:34:b1:4a:1d:fe:8a:ca:6b:81:79:cb:6c:71:c9:f9:
58:71:00:da:34:8d:3a:47:0f:ed:91:f5:f5:1b:f5:66:87:ad:
65:db:a8:0a:85:c5:61:2e:01:16:b2:eb:2e:f5:02:05:42:b7:
0c:81:aa:3a:e3:dd:76:3c:5c:83:13:75:1c:7c:8c:94:84:86:
f7:15:62:62:ff:6a:35:f4:94:4a:7b:91:45:24:5e:6f:ee:c1:
2c:b7:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:13 2024 by rpki-client on console-ams.rpki-client.org