Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.cer (raw, json)
Hash identifier: AK01cSga9UH0s/V/f9fCg8RW7uvmUfW4+cLZx3hIiuU=
Subject key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DD8E35FC498A537AA61AF027518ACC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57173
IP: 87.247.224.0/21
IP: 185.197.100.0/22
IP: 2a02:d580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:8e:35:fc:49:8a:53:7a:a6:1a:f0:27:51:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:8d:11:97:bc:ae:86:ce:88:f2:7f:e3:75:
2e:e2:2a:51:07:5b:c8:1a:87:b5:3c:27:d9:48:3c:
01:23:ea:22:df:c9:06:c7:35:29:7d:31:53:63:94:
e6:7f:e3:f7:a7:92:81:94:c2:4e:ce:c0:57:cb:9d:
5b:11:7d:1c:23:a5:1f:8b:76:a6:10:fb:ef:b7:75:
ca:ed:60:19:a4:5b:29:9e:9d:b9:9a:97:1b:70:35:
75:50:a4:6e:56:f9:36:f2:0e:a1:3e:f2:03:f6:b8:
34:1b:14:67:7d:af:12:b9:b2:4d:41:27:aa:f4:07:
e8:5e:70:fd:be:12:14:f4:99:11:51:22:16:b4:77:
1a:31:5a:fc:c1:2b:32:58:94:a2:4a:20:5e:13:d5:
e5:90:94:72:bb:fc:51:8f:3f:ba:af:0b:aa:2c:e7:
5f:8a:e4:1a:b9:02:0f:71:93:f4:b2:1b:db:1a:c7:
19:5b:68:18:b1:6e:d8:c2:d7:e1:eb:bd:d2:03:13:
94:67:5e:70:b3:ff:42:34:f5:f4:5e:01:6a:e7:97:
80:59:5c:d4:98:24:3b:37:66:53:42:52:b5:a9:9f:
a0:3e:55:68:15:ee:40:85:3a:65:49:e6:ab:fa:54:
40:ae:9e:ac:c3:da:20:06:cb:fa:e4:b1:ca:4a:8f:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.224.0/21
185.197.100.0/22
IPv6:
2a02:d580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57173
Signature Algorithm: sha256WithRSAEncryption
06:d8:bd:60:c0:54:32:42:6e:71:95:3f:bd:84:54:e5:fd:ea:
13:69:a4:dc:86:35:f4:51:3b:e1:1f:c3:30:54:e7:ee:3a:3d:
33:3b:bc:73:8b:3f:3c:37:23:f0:40:56:e5:aa:69:a6:c4:01:
9d:c6:c6:37:1c:d3:9e:68:50:e6:58:f0:7d:c6:02:60:b6:4e:
c3:05:51:d7:e1:8a:cb:3f:12:b7:ef:5c:a0:85:d8:db:f0:a0:
52:dc:08:8d:53:50:c4:4c:63:12:e0:8b:f7:ed:0e:ef:d3:5a:
2f:76:7d:63:ce:37:bc:0f:96:86:a0:23:7f:e3:2f:46:61:c7:
1b:38:6c:e5:52:50:2f:4d:ee:2f:14:cc:80:38:29:24:24:3f:
43:71:ab:99:83:93:fb:20:dd:d8:65:44:13:0b:bc:d0:03:55:
f0:b0:00:ea:2c:06:61:aa:9f:49:ed:93:54:2e:b2:56:a5:f9:
17:00:34:f2:2e:7e:de:26:fc:e1:44:65:7e:63:35:ec:de:51:
21:b8:5a:56:30:c2:7f:53:47:0b:02:ae:10:39:cc:08:3e:71:
fe:e2:f9:f6:30:bf:69:92:f7:7f:ff:b6:1e:2d:2b:05:67:a7:
12:16:05:f7:fd:3f:ff:64:12:e0:9a:f6:21:32:ac:cc:01:b2:
56:44:13:a0
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzI3Y41/EmKU3qmGvAnUYrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk1NWNhNDU4NDY4YzU3NzZiOGQ5OTM2ZGZlOWIwYjI2Njg3MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXaNEZe8robOiPJ/43Uu4ipRB1vI
Goe1PCfZSDwBI+oi38kGxzUpfTFTY5Tmf+P3p5KBlMJOzsBXy51bEX0cI6Ufi3am
EPvvt3XK7WAZpFspnp25mpcbcDV1UKRuVvk28g6hPvID9rg0GxRnfa8SubJNQSeq
9AfoXnD9vhIU9JkRUSIWtHcaMVr8wSsyWJSiSiBeE9XlkJRyu/xRjz+6rwuqLOdf
iuQauQIPcZP0shvbGscZW2gYsW7Ywtfh673SAxOUZ15ws/9CNPX0XgFq55eAWVzU
mCQ7N2ZTQlK1qZ+gPlVoFe5AhTplSear+lRArp6sw9ogBsv65LHKSo9TSQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFqVXKRYRoxXdrjZk23+mwsmaHMcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2JlOWEw
MC1lMGIxLTQ1NDEtOWMwZi0xMzg1OGRhODVmNTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYmU5YTAw
LWUwYjEtNDU0MS05YzBmLTEzODU4ZGE4NWY1My8xL1dwVmNwRmhHakZkMnVObVRi
ZjZiQ3lab2N4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDV/fgAwQCucVkMA0EAgACMAcDBQMqAtWAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDfVTANBgkqhkiG9w0BAQsFAAOCAQEABti9
YMBUMkJucZU/vYRU5f3qE2mk3IY19FE74R/DMFTn7jo9Mzu8c4s/PDcj8EBW5app
psQBncbGNxzTnmhQ5ljwfcYCYLZOwwVR1+GKyz8St+9coIXY2/CgUtwIjVNQxExj
EuCL9+0O79NaL3Z9Y843vA+WhqAjf+MvRmHHGzhs5VJQL03uLxTMgDgpJCQ/Q3Gr
mYOT+yDd2GVEEwu80ANV8LAA6iwGYaqfSe2TVC6yVqX5FwA08i5+3ib84URlfmM1
7N5RIbhaVjDCf1NHCwKuEDnMCD5x/uL59jC/aZL3f/+2Hi0rBWenEhYF9/0//2QS
4Jr2ITKszAGyVkQToA==
-----END CERTIFICATE-----
Generated at Fri May 3 07:39:23 2024 by rpki-client on console-fra.rpki-client.org