Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
File: WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer (raw, json)
Hash identifier: d2xxOKMVASKE2CXrX6k61geOf9Eyu8Kl6VCM7cyuOFY=
Subject key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A71974E6E33C5B05FDE3FF202AA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 87.236.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:19:74:e6:e3:3c:5b:05:fd:e3:ff:20:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:1e:5e:51:a8:d1:5b:17:33:c7:fb:aa:8f:
be:fe:f2:19:2a:71:bf:ed:b2:4f:34:5b:3a:88:4e:
a5:69:c5:97:aa:fa:b2:fa:b4:d1:87:28:36:3e:56:
a5:99:0e:fd:00:4a:5b:7a:d3:8b:9f:7e:a8:52:b0:
28:6f:8a:4a:04:76:88:52:0e:7d:73:6d:61:af:85:
19:0f:1a:c5:e2:74:cc:a8:f6:e1:7c:ed:15:b7:ed:
d4:cd:9e:d7:a6:ca:6a:72:ec:68:f4:ff:fd:53:7e:
70:57:2e:3b:f6:93:af:24:27:78:5e:94:b3:00:f6:
24:c4:17:7d:43:d0:ef:8c:52:26:58:0a:66:a5:76:
a4:6b:00:68:33:b6:9a:e6:bb:67:75:51:76:b5:1a:
9b:09:b2:db:a1:9d:09:52:8c:37:10:71:42:2e:43:
dd:6a:43:9d:d4:d2:93:78:d4:68:fa:7f:90:86:2e:
8f:64:90:94:d0:30:a2:e9:5d:d2:e4:b6:b0:b6:7b:
69:91:78:3b:a3:f8:dd:9a:d5:27:98:01:84:be:d9:
cb:db:cd:d0:86:54:05:fe:a2:f1:66:4e:83:1d:42:
1a:72:c5:aa:4d:3f:9d:cc:50:17:87:1e:ba:f1:f2:
d5:fe:69:1e:97:5d:63:53:7c:40:49:56:d3:b3:f9:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.33.0/24
Signature Algorithm: sha256WithRSAEncryption
80:37:79:04:5c:43:4f:99:8f:ad:dd:dd:1f:79:38:f1:15:13:
bf:23:ee:bc:8c:79:68:34:a7:56:37:82:0e:e6:c4:da:f3:57:
0c:10:5d:1e:9c:17:67:67:b9:96:f5:04:7d:1b:88:f0:06:d7:
e9:1b:f8:9f:8d:5f:76:d0:79:c9:e5:4d:ff:e2:67:ff:01:ef:
68:66:d0:b4:70:47:d1:01:b9:6e:87:cd:2a:eb:a2:63:7b:f8:
4d:89:af:ce:65:bb:0e:2c:e9:9f:40:c7:0f:5a:8e:3e:7e:e6:
0e:2e:12:97:f1:66:90:b8:4c:86:2f:70:ed:92:3e:28:6e:9b:
70:8d:6f:c9:3d:87:cd:c7:f8:85:bc:9b:eb:a6:50:fb:e9:42:
ae:6f:f2:e3:e6:f0:55:aa:2c:18:b4:ba:51:0e:e9:b4:eb:46:
c8:43:b8:e4:f8:68:c9:2c:f1:57:6c:3c:3c:fc:52:f1:88:5b:
ce:4d:e6:12:b0:1d:06:f2:4a:be:8a:c4:0c:36:fb:48:80:bd:
ad:39:7d:7f:82:55:b2:30:35:ca:b3:ef:9b:2a:1a:af:61:4e:
d5:41:84:aa:9c:de:4b:4e:d0:98:19:49:f0:30:82:c3:8f:86:
70:bb:ab:b3:51:73:5c:5d:6a:93:a5:fc:86:fe:a2:ea:4f:37:
bc:7a:b9:d4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDtqcZdObjPFsF/eP/ICqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk1ZDJlMzQ1YTFmNGRhYTRlZGZlN2MwNWNlNWRmNzZiNTlhY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx10eXlGo0VsXM8f7qo++/vIZKnG/
7bJPNFs6iE6lacWXqvqy+rTRhyg2PlalmQ79AEpbetOLn36oUrAob4pKBHaIUg59
c21hr4UZDxrF4nTMqPbhfO0Vt+3UzZ7Xpspqcuxo9P/9U35wVy479pOvJCd4XpSz
APYkxBd9Q9DvjFImWApmpXakawBoM7aa5rtndVF2tRqbCbLboZ0JUow3EHFCLkPd
akOd1NKTeNRo+n+Qhi6PZJCU0DCi6V3S5LawtntpkXg7o/jdmtUnmAGEvtnL283Q
hlQF/qLxZk6DHUIacsWqTT+dzFAXhx668fLV/mkel11jU3xASVbTs/mfEwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFqV0uNFofTapO3+fAXOXfdrWazwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzFhZGYz
Yy1iYTMzLTQzNWItYTZkNS05NTdhYWJiYzg0ODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMWFkZjNj
LWJhMzMtNDM1Yi1hNmQ1LTk1N2FhYmJjODQ4My8xL1dwWFM0MFdoOU5xazdmNThC
YzVkOTJ0WnJQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAV+whMA0GCSqGSIb3DQEBCwUAA4IBAQCAN3kE
XENPmY+t3d0feTjxFRO/I+68jHloNKdWN4IO5sTa81cMEF0enBdnZ7mW9QR9G4jw
BtfpG/ifjV920HnJ5U3/4mf/Ae9oZtC0cEfRAbluh80q66Jje/hNia/OZbsOLOmf
QMcPWo4+fuYOLhKX8WaQuEyGL3Dtkj4obptwjW/JPYfNx/iFvJvrplD76UKub/Lj
5vBVqiwYtLpRDum060bIQ7jk+GjJLPFXbDw8/FLxiFvOTeYSsB0G8kq+isQMNvtI
gL2tOX1/glWyMDXKs++bKhqvYU7VQYSqnN5LTtCYGUnwMILDj4Zwu6uzUXNcXWqT
pfyG/qLqTze8ernU
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:13 2024 by rpki-client on console-fra.rpki-client.org