Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer (raw, json)
Hash identifier: trHy/J1v7qcFQx2RuWbdArp9nQ8EDvLiGETciV2TD/s=
Subject key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3F155EA7CB02F671A2D57B4D2D2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.248.92.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:15:5e:a7:cb:02:f6:71:a2:d5:7b:4d:2d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:ed:3e:c4:36:31:e1:57:c8:9c:01:c9:2a:
69:72:97:01:3c:e8:78:43:eb:18:ca:ba:65:df:45:
2b:dc:98:48:cb:ff:5a:b6:4b:af:ad:98:5a:35:08:
22:b3:db:6c:30:41:2b:21:7d:68:21:0c:ab:93:7d:
62:01:88:bd:4e:b4:b9:7a:9c:06:9f:45:fd:f7:56:
a9:2c:2f:2d:41:79:16:76:fc:4f:7f:c9:12:0b:fa:
9d:84:a9:4a:b5:ba:4e:b6:b8:b3:4b:be:87:2c:e2:
57:65:31:b9:72:e0:e3:87:a8:84:db:e3:c0:97:39:
d5:65:b9:57:51:76:c8:fb:e2:4e:89:15:6c:7a:1d:
f7:52:b5:f6:4b:be:8f:d1:1d:e2:09:c2:ba:ff:06:
3e:1f:d4:4c:77:c1:46:a8:bd:41:e3:a6:1e:07:fe:
78:87:ff:e3:74:4f:3d:8a:61:4d:8d:c0:35:26:b1:
10:0d:e1:c3:ca:4d:26:98:1c:5b:a0:99:d4:cf:88:
ab:b0:4d:9a:28:5b:04:7f:2e:49:41:a2:0a:fd:09:
33:94:2f:80:c7:77:0b:2e:52:0d:17:a5:7e:16:78:
79:85:66:22:aa:f0:fb:15:27:3c:4e:e0:6c:8e:ea:
39:f9:6c:98:bf:f8:12:a5:3d:cc:7e:80:86:b6:92:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
75:32:7c:ae:41:ee:e9:90:e8:8f:e0:6e:6f:c4:84:b0:27:3d:
0e:9e:5f:1f:80:4f:b9:26:23:05:43:e3:3a:fc:77:4c:c2:1e:
2e:ca:76:92:46:d5:00:f1:f2:f2:e6:9f:26:de:78:6e:c9:01:
5b:e1:ab:c5:c1:1a:f2:7a:b1:7f:46:12:52:21:9c:10:93:8c:
4a:1a:94:1a:08:c6:38:3a:53:b7:20:39:25:df:f2:59:5a:4f:
16:14:26:2c:08:ad:6b:06:fe:21:f0:b6:dc:85:fa:8b:a1:98:
25:ba:9a:7d:7d:d9:42:ac:fd:37:14:fb:1a:b4:af:ee:b4:f7:
52:27:66:f2:a0:e6:07:d1:f5:95:bf:7f:ab:db:33:3a:b8:66:
7f:34:cb:44:8d:cf:f4:bc:df:be:99:4a:e3:21:7d:f4:52:1b:
0b:ea:d9:c6:b5:0e:d4:fc:9d:e3:01:00:66:6c:30:92:59:42:
7d:45:59:77:d5:f0:77:83:22:91:26:48:ca:0f:70:ff:2d:fc:
85:d6:ac:46:c5:a2:d2:ee:eb:55:9d:25:79:21:cc:14:53:35:
da:ed:0b:83:41:9d:9e:02:24:b4:8a:bd:d5:c0:d4:77:08:42:
a1:0e:d5:84:52:18:86:6f:7c:f6:5e:d5:f1:24:7a:12:e1:25:
5d:13:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:03:53 2024 by rpki-client on console-fra.rpki-client.org