Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
File: Wi8mmbpTWep_NwLEbUoEghnhpks.cer (raw, json)
Hash identifier: FyIK2rDSDBSa6lphXWSGfEjoJg4hQLx6TdeVqO33UyA=
Subject key identifier: 5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E46EE23DE4B94D9CDAEEEAF9F92A9CD17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 16 Mar 2024 11:03:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.24.84.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:ee:23:de:4b:94:d9:cd:ae:ee:af:9f:92:a9:cd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 11:03:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:de:12:1e:c6:0a:37:5b:13:2a:ad:08:94:
9c:9a:61:c4:45:f5:63:52:5e:0e:ac:aa:9e:96:22:
73:92:68:4c:25:c4:be:fe:02:3a:4e:14:12:ec:47:
4b:5d:1c:8c:30:6b:81:10:43:62:0e:f8:4e:16:0f:
f6:88:81:4e:cf:00:20:24:25:1f:03:e0:07:0e:a7:
24:58:09:0f:4e:fe:04:d4:2a:dc:35:b6:ff:bb:b1:
dc:ff:b7:3e:c4:18:4f:52:0a:d8:a7:0d:19:b1:0c:
ef:5a:e3:81:3b:54:65:27:d6:2b:c9:ef:e2:71:76:
a3:fb:b6:fe:21:23:9e:cb:d6:04:a8:a5:ba:3c:8b:
a1:ca:94:d8:b8:cc:71:2e:2e:0f:5e:df:38:78:b7:
59:92:e3:33:5d:ac:a6:06:07:a7:51:b7:16:1e:fa:
50:ca:61:e0:87:86:05:80:70:9c:40:cd:42:da:48:
18:ce:51:0d:e3:1e:38:45:98:c2:26:c8:60:c9:bb:
b0:45:1c:03:7a:ed:e0:7c:a6:37:45:21:fc:2d:bd:
15:9c:11:b4:16:ed:55:fc:51:04:2d:39:62:25:fc:
90:e2:c1:48:f7:48:93:a8:af:24:f3:55:66:9f:da:
fe:30:54:7e:d8:ac:66:3a:ed:99:94:7b:00:be:5b:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:08:e8:d1:af:4e:c6:bc:65:36:2c:d3:2b:dc:3c:b4:f6:c9:
3e:81:be:23:5f:ce:82:86:ad:b8:be:a8:ed:54:5d:e0:24:c6:
d2:10:cd:50:c8:5d:b3:1c:b1:5c:0f:4f:ed:65:dc:c2:d8:be:
98:af:dc:a3:86:cf:40:8c:2c:93:69:49:eb:b2:b7:15:e2:c8:
f3:5b:d4:5f:bd:82:64:93:83:81:15:50:61:ee:e8:ef:14:6a:
a6:14:ce:1c:7b:11:3d:97:16:61:9c:41:f7:5c:f2:10:a8:26:
e0:c1:7a:6f:32:85:a8:16:77:06:21:41:3d:7b:14:94:60:8e:
af:ec:da:37:bb:06:dc:71:e1:c3:94:d0:7f:8d:34:b7:df:0b:
d2:e3:da:98:35:df:b9:69:1d:88:3c:2d:c1:75:6b:06:20:79:
c7:2f:86:2b:fd:02:47:80:e8:98:31:a8:c9:89:ed:cb:7f:61:
66:77:83:ba:20:9e:c8:78:44:d5:39:85:d2:0c:aa:61:74:b5:
71:7b:05:1f:98:16:4c:4f:94:9d:00:9a:ee:ee:9d:1d:02:e0:
85:96:4d:3e:fc:98:4f:51:c9:3f:50:cc:b3:3a:ab:32:0c:15:
48:37:94:50:20:00:39:e4:19:a8:58:b7:95:59:08:15:55:b3:
64:a8:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:52 2024 by rpki-client on console-ams.rpki-client.org