Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer (raw, json)
Hash identifier: TzClL8kxyGNWY7c4ieCmWfiRns2/i4pAsHgWItRvU3Q=
Subject key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7937A7FBE124725754B6B59B145D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.54.174.0 -- 192.54.176.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:93:7a:7f:be:12:47:25:75:4b:6b:59:b1:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:3c:c7:82:cd:ef:1e:ab:9b:24:5d:b1:18:
e2:95:c3:13:6f:08:86:34:87:00:b3:7c:82:25:7f:
fc:82:51:1d:98:e3:0d:93:63:ba:c2:ec:4b:e1:38:
37:44:f8:34:d9:8d:b6:f5:e9:5a:d5:13:cf:41:2b:
cc:2d:f5:f0:0c:79:31:1e:b4:bd:25:51:3f:f7:93:
66:09:86:29:9b:28:2c:49:6b:8c:12:52:a9:51:2e:
a5:8b:d2:57:6b:54:39:50:10:ae:15:54:42:91:6e:
1f:03:36:3d:98:59:d6:2e:f3:a6:b7:6f:af:57:df:
4e:b5:9c:23:05:9b:38:a4:77:38:28:7d:2a:00:68:
b3:73:f4:0d:27:e0:ba:f1:7c:8c:24:39:1f:78:5e:
6d:b9:04:47:f9:f3:a5:0e:f7:59:5f:9e:2b:7f:86:
9e:bd:67:b8:8f:1d:1e:4f:e9:b7:97:87:e3:6b:72:
13:17:1c:e5:39:6f:04:b7:39:3b:e2:dd:88:ff:4b:
03:b3:1a:7a:84:47:e7:ee:24:ce:32:8c:88:60:23:
0b:b9:cd:e1:71:dd:0b:f1:60:3c:0c:0f:aa:4e:a2:
be:fc:f1:c1:94:9e:75:85:83:38:93:03:55:8f:cf:
3a:8c:70:84:22:04:b6:6a:1c:a0:15:e8:e1:04:6f:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.174.0-192.54.176.255
Signature Algorithm: sha256WithRSAEncryption
00:49:7e:01:3c:fb:2c:49:64:8f:b9:97:14:e0:c3:91:aa:d8:
a3:b3:75:0e:b7:29:b8:b3:d3:d1:51:e3:a8:86:d1:c7:89:09:
1e:d1:8c:bb:5f:d0:41:e3:11:a5:11:06:a9:21:c1:c7:e9:58:
cf:50:10:fa:24:be:74:ca:94:69:f4:7b:3c:0d:d1:b8:0b:2a:
74:75:4d:5d:f7:a6:aa:2a:00:00:21:61:8a:c1:21:d2:20:71:
ef:d8:1d:e8:23:4d:66:cb:cb:2c:7e:7e:cb:5e:68:a3:23:3e:
b8:b0:7c:f3:b8:55:56:c6:02:c2:fe:e8:29:30:0f:16:52:ff:
ea:2b:3b:9a:18:bb:ac:8b:29:c7:91:75:09:a1:ef:da:d9:71:
3c:99:5b:e2:8b:5d:bf:bc:2f:e3:5a:18:50:85:19:bf:dc:76:
95:79:b7:c3:91:73:14:9c:fa:b2:fb:f3:b8:93:40:93:ba:80:
20:2f:24:f3:73:cf:fb:3e:3c:f6:7c:1f:54:12:31:91:48:53:
02:02:4b:22:57:76:15:e0:ce:97:c5:c8:00:09:e5:b3:d8:5c:
f4:60:fc:df:ff:21:b2:f4:f0:7c:68:ef:1e:86:df:26:59:09:
4b:54:80:e6:bb:e9:28:07:92:2f:94:c0:ff:96:13:50:0d:1a:
1b:f8:84:df
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYzGt5N6f74SRyV1S2tZsUXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjFkMjI4YjZhY2JkMTgwM2NmZjU2MGZhNGI0MmY4MzJkMjgzMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGo8x4LN7x6rmyRdsRjilcMTbwiG
NIcAs3yCJX/8glEdmOMNk2O6wuxL4Tg3RPg02Y229ela1RPPQSvMLfXwDHkxHrS9
JVE/95NmCYYpmygsSWuMElKpUS6li9JXa1Q5UBCuFVRCkW4fAzY9mFnWLvOmt2+v
V99OtZwjBZs4pHc4KH0qAGizc/QNJ+C68XyMJDkfeF5tuQRH+fOlDvdZX54rf4ae
vWe4jx0eT+m3l4fja3ITFxzlOW8Etzk74t2I/0sDsxp6hEfn7iTOMoyIYCMLuc3h
cd0L8WA8DA+qTqK+/PHBlJ51hYM4kwNVj886jHCEIgS2ahygFejhBG8+hQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFFsdIotqy9GAPP9WD6S0L4MtKDJPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzllZWQw
NS0xNDc3LTRmMDUtOGFlMy02MThlODliMTJjNDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvOWVlZDA1
LTE0NzctNGYwNS04YWUzLTYxOGU4OWIxMmM0MS8xL1d4MGlpMnJMMFlBOF8xWVBw
TFF2Z3kwb01rOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBAHANq4DBADANrAwDQYJKoZIhvcNAQELBQAD
ggEBAABJfgE8+yxJZI+5lxTgw5Gq2KOzdQ63Kbiz09FR46iG0ceJCR7RjLtf0EHj
EaURBqkhwcfpWM9QEPokvnTKlGn0ezwN0bgLKnR1TV33pqoqAAAhYYrBIdIgce/Y
HegjTWbLyyx+fsteaKMjPriwfPO4VVbGAsL+6CkwDxZS/+orO5oYu6yLKceRdQmh
79rZcTyZW+KLXb+8L+NaGFCFGb/cdpV5t8ORcxSc+rL787iTQJO6gCAvJPNzz/s+
PPZ8H1QSMZFIUwICSyJXdhXgzpfFyAAJ5bPYXPRg/N//IbL08Hxo7x6G3yZZCUtU
gOa76SgHki+UwP+WE1ANGhv4hN8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:51:31 2024 by rpki-client on console-ams.rpki-client.org