Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer (raw, json)
Hash identifier: fF+1oEJVrBRyz0P8pa3+Hx263GaVdQS1W726xBcEcWw=
Subject key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE8333E2E554DC432B52C6A9206CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31688
IP: 5.63.24.0/21
IP: 91.190.168.0/21
IP: 185.85.76.0/22
IP: 2a02:798::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:33:3e:2e:55:4d:c4:32:b5:2c:6a:92:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:dd:dd:a4:6d:a5:15:80:1e:fc:3f:ac:22:
cf:39:45:82:d7:af:83:d3:3a:ac:91:b6:92:ab:0b:
25:94:d1:26:a1:36:ce:74:b5:16:af:0e:7f:f7:3c:
77:69:71:71:c8:6a:ed:97:99:ef:34:ab:f5:eb:42:
8b:ec:13:64:26:a2:99:ea:91:64:38:dc:48:49:4a:
6b:d0:c6:12:9d:11:4f:83:a0:31:bb:98:94:0f:39:
a4:a1:32:4d:ad:8d:6b:dd:d1:da:c2:81:a5:a7:b8:
79:fa:52:ae:80:72:84:22:f2:6c:13:6a:ac:f1:6a:
f3:d3:bb:28:4d:c3:11:2b:f1:e0:51:c3:50:da:66:
af:f5:bf:18:d1:2e:a5:56:25:fb:eb:76:e2:65:7a:
69:86:a9:22:53:f1:e1:5d:1b:43:e8:6d:2c:21:c5:
ed:ba:ca:8f:63:e6:7a:2c:1e:77:fa:17:aa:fe:12:
2e:9a:51:4b:22:ed:3c:8c:d8:35:31:f9:da:1e:a6:
fe:03:78:ab:b4:59:36:e4:ca:75:07:d5:f0:21:f6:
0f:d6:ab:6a:98:a1:a9:4c:2c:08:34:81:97:22:ae:
25:9c:63:a4:a1:a8:2e:dc:8b:67:f7:d9:75:f2:f5:
6e:c2:28:ea:c4:f5:d8:3b:7b:34:1d:4a:72:af:a9:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31688
Signature Algorithm: sha256WithRSAEncryption
ad:a7:45:5e:ff:66:f0:e3:45:52:4b:b8:37:f5:cc:bf:4b:d1:
8b:e3:eb:70:2f:ae:3e:eb:79:d6:73:cf:c7:12:e3:ae:bf:69:
19:bd:d0:81:93:af:77:0d:30:3b:4d:5b:08:a5:1c:8e:29:8a:
14:74:fb:04:01:14:46:b5:c1:f5:46:ed:60:e1:19:6c:36:2a:
d8:90:43:78:9a:44:13:69:d6:50:f8:da:7a:f3:32:b2:eb:c5:
bb:27:ef:db:d0:78:6e:dc:c3:fc:8e:96:ea:0e:4b:fb:ca:e7:
6f:de:05:92:1b:ad:3f:e0:66:04:66:58:8f:31:c8:34:5e:b4:
3e:55:e3:bc:8c:e2:ee:ab:2f:c4:12:1f:e2:a0:9d:cb:38:f6:
77:75:4c:81:82:e0:a8:4c:91:81:c2:ef:cb:e5:ef:96:e9:b9:
ce:2f:43:6a:63:8d:f1:db:42:a4:25:89:81:f1:56:ef:48:0f:
7c:dc:af:b5:75:c3:13:72:e4:c9:fd:8a:f4:90:ef:79:4d:13:
7e:10:0f:dd:a8:71:76:19:d3:d8:a3:eb:b2:5c:c6:63:bb:4e:
37:a5:0b:91:3f:67:2d:c9:e1:20:ab:da:cc:d9:f1:64:a6:45:
fc:ac:a6:62:61:9b:f2:82:fa:bb:01:98:d8:17:17:89:20:b8:
da:6d:6b:9c
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAYzC2ugzPi5VTcQytSxqkgbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTE0MWM1MDkwODI0ZDBhMTdjMjllYzQwNTBlMjEwMDcxMTNmYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSXd3aRtpRWAHvw/rCLPOUWC16+D
0zqskbaSqwsllNEmoTbOdLUWrw5/9zx3aXFxyGrtl5nvNKv160KL7BNkJqKZ6pFk
ONxISUpr0MYSnRFPg6Axu5iUDzmkoTJNrY1r3dHawoGlp7h5+lKugHKEIvJsE2qs
8Wrz07soTcMRK/HgUcNQ2mav9b8Y0S6lViX763biZXpphqkiU/HhXRtD6G0sIcXt
usqPY+Z6LB53+heq/hIumlFLIu08jNg1MfnaHqb+A3irtFk25Mp1B9XwIfYP1qtq
mKGpTCwINIGXIq4lnGOkoagu3Itn99l18vVuwijqxPXYO3s0HUpyr6lfYQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFFoUHFCQgk0KF8KexAUOIQBxE/vaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2IyMGU5
MC1iZjZlLTRlMjUtODdkNS1lY2VlZmY4ZTg0ZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYjIwZTkw
LWJmNmUtNGUyNS04N2Q1LWVjZWVmZjhlODRlMC8xL1doUWNVSkNDVFFvWHdwN0VC
UTRoQUhFVC05by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQDW76oAwQCuVVMMA0EAgACMAcDBQAq
AgeYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnvIMA0GCSqGSIb3DQEBCwUAA4IB
AQCtp0Ve/2bw40VSS7g39cy/S9GL4+twL64+63nWc8/HEuOuv2kZvdCBk693DTA7
TVsIpRyOKYoUdPsEARRGtcH1Ru1g4RlsNirYkEN4mkQTadZQ+Np68zKy68W7J+/b
0Hhu3MP8jpbqDkv7yudv3gWSG60/4GYEZliPMcg0XrQ+VeO8jOLuqy/EEh/ioJ3L
OPZ3dUyBguCoTJGBwu/L5e+W6bnOL0NqY43x20KkJYmB8VbvSA983K+1dcMTcuTJ
/Yr0kO95TRN+EA/dqHF2GdPYo+uyXMZju043pQuRP2ctyeEgq9rM2fFkpkX8rKZi
YZvygvq7AZjYFxeJILjabWuc
-----END CERTIFICATE-----
Generated at Wed May 1 08:50:44 2024 by rpki-client on console-ams.rpki-client.org