Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
File: WtERZRPCPYeqy_Wxu-45mBx2McE.cer (raw, json)
Hash identifier: nT9AMWrxE3H9MmAg+9k5lFPf/v/jjR04H5dERYS+zAc=
Subject key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906E4A75876CE2C84CC21F75CA2F02F3A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jul 2024 12:34:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.6.180.0/22
IP: 195.60.204.0/22
IP: 2a02:d200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:4a:75:87:6c:e2:c8:4c:c2:1f:75:ca:2f:02:f3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 12:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:4f:45:c5:a8:85:38:4e:7a:c0:10:e0:d8:
73:b4:2b:ff:62:3f:d3:1e:16:89:17:85:16:b9:31:
2c:2b:3f:99:ba:bf:01:38:49:7d:b2:81:b4:15:b7:
fb:cf:94:26:4d:58:f1:61:38:59:07:72:9c:3d:74:
52:56:ad:30:41:e3:95:c5:1d:30:f5:fa:db:27:73:
49:db:94:2b:b1:94:fa:bc:25:c2:40:83:41:50:70:
0f:c4:d5:1d:48:81:10:c6:d1:f3:41:72:25:f0:5a:
63:7f:31:09:29:3b:ce:95:b3:75:e2:c0:f0:e0:4a:
e8:44:a2:f7:6f:da:76:93:8a:e4:89:6c:ef:3d:72:
0e:a5:d9:cb:89:d4:f2:df:69:90:67:04:98:f1:11:
b6:2b:6e:4e:4d:04:e9:75:d7:1d:56:5d:b0:64:c4:
90:0a:ea:85:71:93:97:e9:26:53:40:da:40:3b:af:
ea:32:bf:90:cc:9a:14:3e:6a:35:de:5a:59:0a:37:
47:36:89:12:66:ab:17:36:03:91:a2:76:6c:99:87:
8c:fd:15:cc:0d:39:25:86:d6:8e:2c:21:42:84:49:
1c:c6:86:e0:3a:4d:cb:62:17:25:6b:27:ba:06:ba:
d7:2b:24:28:65:1b:39:e5:20:89:e1:36:05:ba:97:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.180.0/22
195.60.204.0/22
IPv6:
2a02:d200::/29
Signature Algorithm: sha256WithRSAEncryption
68:8d:1e:0a:e8:aa:47:45:3b:08:64:30:68:a6:24:fe:53:9a:
f0:ea:43:08:0e:8d:2d:aa:c6:b6:d5:17:fb:6b:ca:ea:c1:d6:
24:f8:34:73:0f:4c:48:40:ef:84:f6:8c:bd:24:29:b3:21:be:
ad:3e:5e:bd:0f:71:46:79:14:a3:0f:4c:dd:1e:3e:e3:66:f7:
04:b3:e5:b7:4b:d8:67:e2:45:c3:f5:5d:ec:7f:f5:8c:44:b1:
f9:73:41:fd:aa:e7:a9:7b:99:22:e1:08:b6:b9:eb:b8:b9:60:
1c:d3:49:0c:95:4b:50:61:c8:55:44:3c:45:89:bc:7a:c2:59:
41:2f:43:29:b1:b8:c7:b7:13:79:3a:02:cd:ae:75:96:3a:29:
de:2f:1c:a2:d8:c8:78:43:c7:7f:31:e8:c3:e1:ed:b7:bd:97:
eb:9d:f6:d5:37:bc:87:5a:77:0d:68:8c:c0:72:52:3c:f3:6c:
40:73:fd:47:62:c7:5f:ef:ed:a5:bf:21:3b:af:97:3e:9e:c5:
f9:d4:fd:ea:1a:48:71:3b:f2:6c:ae:6c:49:ec:e7:0a:2d:db:
68:4b:63:49:ac:da:4f:fc:4f:94:1e:90:8b:64:7b:c4:ec:6e:
a2:6e:09:86:f5:30:27:5d:c9:f2:02:e1:27:a2:d2:1e:38:40:
e5:20:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:14 2024 by rpki-client on console-fra.rpki-client.org