Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer (raw, json)
Hash identifier: 5P5YQDwTTSeATspuoQ4cO3iwobP3Wrnn+n29IdFj1N0=
Subject key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7D01AC7B92910C5EABC7C8AFBCF11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28979
IP: 185.204.240.0/22
IP: 194.127.215.0 -- 194.127.223.255
IP: 2001:67c:18ec::/48
IP: 2a04:b640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d0:1a:c7:b9:29:10:c5:ea:bc:7c:8a:fb:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b3358110dadf224e719914161731df5e56c4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:49:82:c9:a1:e9:6c:4e:71:03:b8:77:d5:
71:52:67:dd:fa:c2:29:8b:42:a1:2f:30:86:dd:5b:
c2:2d:cb:f1:a6:9d:0e:d7:56:ce:f2:98:0d:67:2e:
f6:69:10:09:ee:71:84:ca:79:78:67:ca:f1:ca:83:
fd:26:49:e1:8a:52:79:31:53:1c:81:7a:e8:bf:01:
45:37:37:ec:f2:8f:14:d7:b7:7b:6f:ac:73:2d:ac:
f2:3f:22:5e:24:db:ea:d8:c1:bb:5c:cd:3d:84:ea:
38:b3:f1:ac:98:67:48:11:f5:6b:b0:fa:ed:df:3f:
59:22:52:35:ad:d3:d4:bb:96:32:bd:59:51:f0:db:
a7:f8:c9:3a:f9:02:82:99:9e:cc:00:61:a8:89:45:
da:21:c1:3d:ed:25:0b:8d:cf:5f:01:32:0b:5f:50:
67:4d:b9:11:7e:dc:22:e5:e6:90:bf:50:34:37:cd:
a2:af:90:72:79:a1:e1:d1:03:69:90:ec:f3:43:4d:
68:63:bd:16:20:06:2e:74:53:ed:dd:b6:f7:0d:f2:
31:d8:51:94:ff:ff:23:b7:fa:9b:da:d9:71:2e:65:
bf:88:86:09:d3:82:ee:d5:28:5a:8d:15:3c:32:e4:
1b:40:51:9c:16:b3:36:f9:93:d4:a1:a0:6d:4f:75:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.240.0/22
194.127.215.0-194.127.223.255
IPv6:
2001:67c:18ec::/48
2a04:b640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28979
Signature Algorithm: sha256WithRSAEncryption
1e:ac:4d:03:54:af:d1:4f:fc:6f:e7:f9:1f:79:41:48:81:17:
8b:92:47:22:1c:34:d1:3f:ec:be:fe:6b:ba:88:37:27:4f:85:
db:4c:d4:61:9d:16:88:a3:b8:4b:11:99:27:e4:c7:1d:51:a6:
1a:bd:ec:98:d7:10:49:5c:e7:84:7a:25:fb:d3:4d:f6:c7:6c:
8f:08:6a:6f:6b:53:40:de:aa:e8:99:3f:fe:fc:66:a2:63:ca:
79:4a:de:71:01:84:4a:f0:95:80:78:d7:31:ff:b5:48:56:44:
7d:98:ed:04:a8:87:f7:de:45:57:e3:61:29:47:69:49:07:80:
fc:6d:75:ff:ef:3f:ab:54:63:3c:18:13:69:e2:9e:2c:44:fc:
47:2c:ad:69:dd:dd:56:25:64:ff:84:de:57:0e:03:2b:98:a1:
4f:86:b9:08:20:a3:83:bf:57:0f:7e:cf:52:50:d0:77:0b:db:
94:c8:41:49:46:94:88:59:4f:ce:eb:6d:cc:89:62:a1:96:28:
2c:19:24:6e:79:f3:b8:7a:dd:db:4e:9d:0d:91:e5:70:95:ed:
5a:00:04:02:46:85:dd:4f:86:a6:31:dd:73:5c:3e:e8:54:d9:
51:a2:08:9b:ed:1c:06:40:5a:6c:7f:17:4a:58:29:f0:46:11:
51:bd:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:01 2024 by rpki-client on console-fra.rpki-client.org