Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
File: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer (raw, json)
Hash identifier: DzXsYaLtUPRz8eY404IAIS05gVNKdRY7CnxUTcWW0tw=
Subject key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425433786F03850B587B5FAED6BBBA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211268
IP: 193.32.59.0/24
IP: 193.56.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:43:37:86:f0:38:50:b5:87:b5:fa:ed:6b:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:33:a3:06:6c:e1:74:22:ee:13:da:87:58:
50:ae:93:8c:7d:12:0c:cf:83:ad:71:8e:be:93:cc:
3e:0f:a4:46:64:2e:e6:16:db:de:1e:91:0c:4e:77:
cf:31:71:c5:e6:3c:b4:79:2a:02:b8:fe:08:2d:8b:
d0:f7:ca:53:b4:c5:d6:7b:c7:4e:8f:45:26:7f:ec:
e1:dc:99:70:af:dc:85:4d:ac:4c:e8:71:ee:f1:3f:
e8:f4:97:9f:8d:57:88:3a:95:f4:6f:58:21:a6:0f:
44:03:07:04:b9:3f:b0:8d:64:be:f8:4b:e6:5d:09:
cd:62:09:a9:ff:4f:ec:99:c9:47:2e:fc:4d:89:ff:
10:53:fc:a6:ef:1b:4e:e7:6a:71:f3:f0:11:46:e0:
4e:07:0d:12:98:8a:15:73:84:18:fe:33:6f:d7:d0:
9b:64:87:fe:de:cc:c8:94:7f:0b:b7:e6:2d:4c:74:
3f:eb:19:de:69:18:01:4d:e8:ae:c9:68:93:4a:46:
36:37:e8:ed:51:b8:9b:26:b9:44:60:0f:bc:1b:ef:
07:62:f1:0e:88:19:9e:75:57:3f:62:6a:ee:e3:b7:
94:40:25:aa:d9:9c:44:7f:49:e2:a9:4d:49:ce:eb:
44:7d:8e:44:85:93:fc:bc:1c:05:d7:74:b8:30:e5:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.59.0/24
193.56.132.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211268
Signature Algorithm: sha256WithRSAEncryption
70:86:7a:7a:91:c7:cc:dd:45:22:19:4b:38:27:06:6c:a3:bb:
3e:63:c3:98:de:89:68:6b:59:a4:bb:e4:79:87:76:78:d7:a7:
b0:2d:68:2c:e3:1b:8d:27:37:78:14:67:8e:ab:b9:f4:89:33:
be:0f:51:81:1a:49:92:a6:32:fc:34:ef:dc:e8:41:85:d3:cf:
d4:53:4b:f4:fd:90:ef:7d:7b:94:87:2f:23:e1:48:9a:36:0e:
24:3f:9b:e3:64:7b:c4:25:05:30:f2:2e:9d:99:72:86:47:0c:
a1:66:10:ec:45:fe:26:02:91:72:76:58:42:ff:1d:3f:63:93:
de:48:73:6e:87:84:f7:bd:c9:ad:17:5e:c4:f8:99:5a:74:c1:
70:43:30:cd:98:71:48:06:ab:c8:4f:d1:12:27:00:43:d2:bb:
6e:d0:fd:f4:3b:3d:b3:ad:a1:b8:f6:2b:4f:e0:fd:82:c1:94:
0c:6e:9a:c0:5e:6a:ee:f2:3c:6b:4e:c6:85:6f:1f:f8:67:bd:
f5:6d:42:bd:22:7a:83:c4:94:10:99:0b:7f:eb:31:a8:6a:92:
72:7a:e9:a6:b3:03:53:6d:7f:13:e7:0d:45:93:73:20:a2:d6:
7a:74:23:85:30:68:aa:6e:5f:bb:61:de:03:48:98:9e:bd:15:
32:dc:5d:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 10:19:57 2024 by rpki-client on console-fra.rpki-client.org