Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
File: _waWcZQB67Hdu6mtT7jGbxTvcKU.cer (raw, json)
Hash identifier: iN5uU6sIGtC6u0lfAo+tGyjwjFSEUjiNqQjvl4KNyTw=
Subject key identifier: FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4710C33BFFD5D1701067EBBFCA5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48952
IP: 185.161.40.0/22
IP: 2a07:c340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:10:c3:3b:ff:d5:d1:70:10:67:eb:bf:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:43:ce:49:19:f2:b9:35:ac:4c:13:d6:0f:
95:c6:21:93:c7:49:ca:a4:de:68:9c:50:f3:71:74:
fd:79:10:51:ee:4d:9e:0f:76:8e:1f:c4:a6:8d:03:
b7:eb:90:62:7e:df:4e:c5:4d:5b:a2:1f:8f:d7:c8:
84:42:44:03:ff:68:3c:5f:57:d4:b9:2e:95:34:25:
fa:d3:72:75:f4:47:5e:cc:1a:8a:63:9a:fb:be:4a:
47:1a:20:a8:1b:e5:4c:91:0f:31:41:d8:72:10:4a:
39:c4:5a:ce:e7:3f:eb:ab:47:40:04:3b:bb:6b:f4:
47:4c:f8:c9:a4:24:6d:da:12:d7:83:52:b6:38:5b:
2b:fd:62:05:b3:bc:f6:f0:12:c9:d9:35:90:79:12:
27:a7:9b:81:af:bf:59:b5:a8:dc:9e:02:f8:e6:35:
5a:93:13:d7:5e:5e:eb:87:22:48:18:89:f1:26:9f:
58:48:c7:fd:0e:05:23:f6:5f:76:ab:20:3c:a3:6b:
79:a5:22:fb:97:4b:dc:8a:8f:c8:b9:52:56:3b:d8:
2c:11:db:b6:89:6e:de:0b:aa:91:1c:ac:ba:9f:5e:
b2:d7:cc:45:24:2e:3d:ef:47:35:36:c6:7a:57:4a:
04:b1:bc:3e:d8:e0:b4:00:96:47:75:8c:47:59:54:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.40.0/22
IPv6:
2a07:c340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48952
Signature Algorithm: sha256WithRSAEncryption
b1:20:76:90:7d:eb:ec:f7:b1:1c:fb:24:aa:45:33:8a:ab:79:
6e:6d:96:f5:18:c4:fe:13:8b:6f:cd:fb:f6:49:77:64:f8:26:
b9:56:55:71:1b:e5:8d:b4:e9:87:1e:b4:d3:51:28:1e:5f:73:
31:62:88:9d:b1:32:48:0e:8f:7a:f3:82:d5:65:ae:53:98:f1:
ca:36:0a:36:7a:6a:ca:cc:b7:45:22:2d:4e:13:71:f6:4f:ac:
c3:45:c2:c4:e4:81:cf:eb:f8:44:56:bf:9a:73:22:eb:d4:d7:
65:d7:dc:45:d5:95:0d:65:f3:cc:1d:1d:6a:aa:bf:a0:74:65:
e1:66:74:47:d2:09:99:ea:0f:dc:4b:0e:c4:9e:2b:f9:64:0e:
30:0b:0f:f0:23:52:c7:24:4f:b7:b4:84:52:21:34:e8:b5:4d:
3f:55:c1:9f:e7:0d:47:11:2c:d9:ed:6b:4b:d1:d6:fd:0e:f9:
4d:95:49:47:f0:53:1a:45:2e:b9:8b:97:36:ec:60:69:32:1c:
3e:90:4c:e5:ed:c1:a0:7f:f7:d2:01:0f:d5:5a:6e:d7:47:f1:
03:5d:11:9d:81:22:16:23:9e:ca:1d:91:0e:f4:47:99:d9:88:
96:b9:25:3c:00:80:7a:08:80:f8:e5:bc:e7:1d:35:cd:e3:dd:
e6:f5:c4:c0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzCbUcQwzv/1dFwEGfrv8pfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjA2OTY3MTk0MDFlYmIxZGRiYmE5YWQ0ZmI4YzY2ZjE0ZWY3MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRDzkkZ8rk1rEwT1g+VxiGTx0nK
pN5onFDzcXT9eRBR7k2eD3aOH8SmjQO365Bift9OxU1boh+P18iEQkQD/2g8X1fU
uS6VNCX603J19EdezBqKY5r7vkpHGiCoG+VMkQ8xQdhyEEo5xFrO5z/rq0dABDu7
a/RHTPjJpCRt2hLXg1K2OFsr/WIFs7z28BLJ2TWQeRInp5uBr79ZtajcngL45jVa
kxPXXl7rhyJIGInxJp9YSMf9DgUj9l92qyA8o2t5pSL7l0vcio/IuVJWO9gsEdu2
iW7eC6qRHKy6n16y18xFJC4970c1NsZ6V0oEsbw+2OC0AJZHdYxHWVQLQQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFP8GlnGUAeux3buprU+4xm8U73ClMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2U2NzNj
Zi0yN2Q3LTQxNjktOGM2Zi05OTAxNTY1ZGQ4NTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTY3M2Nm
LTI3ZDctNDE2OS04YzZmLTk5MDE1NjVkZDg1My8xL193YVdjWlFCNjdIZHU2bXRU
N2pHYnhUdmNLVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuaEoMA0EAgACMAcDBQMqB8NAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC/ODANBgkqhkiG9w0BAQsFAAOCAQEAsSB2kH3r7Pex
HPskqkUziqt5bm2W9RjE/hOLb8379kl3ZPgmuVZVcRvljbTphx6001EoHl9zMWKI
nbEySA6PevOC1WWuU5jxyjYKNnpqysy3RSItThNx9k+sw0XCxOSBz+v4RFa/mnMi
69TXZdfcRdWVDWXzzB0daqq/oHRl4WZ0R9IJmeoP3EsOxJ4r+WQOMAsP8CNSxyRP
t7SEUiE06LVNP1XBn+cNRxEs2e1rS9HW/Q75TZVJR/BTGkUuuYuXNuxgaTIcPpBM
5e3BoH/30gEP1Vpu10fxA10RnYEiFiOeyh2RDvRHmdmIlrklPACAegiA+OW85x01
zePd5vXEwA==
-----END CERTIFICATE-----
Generated at Fri May 3 03:07:39 2024 by rpki-client on console-fra.rpki-client.org