Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.cer (raw, json)
Hash identifier: Zdnp4jSFNCREkbJxcWJLycGZErKNpsaveVs/1lX6iWE=
Subject key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC1386B85BA658057777C9157DA737
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.80.208.0/22
IP: 2a03:7c80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:13:86:b8:5b:a6:58:05:77:77:c9:15:7d:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:78:c0:ac:e4:84:46:87:8f:a9:5e:7e:eb:
44:e4:b0:db:42:d4:ba:64:e9:b7:03:cf:e9:3c:0c:
97:3a:a3:90:d2:76:b6:91:28:4a:8e:58:df:04:78:
58:df:9a:0d:67:3b:25:07:8e:6d:2f:04:71:d0:98:
6b:63:38:26:5f:cc:5e:66:a4:eb:e9:7f:b5:d1:38:
6b:1b:aa:9e:a9:d2:0e:af:62:2c:b4:4b:07:a9:cf:
37:09:2b:e2:69:88:77:ae:30:c0:45:a8:2d:7d:64:
29:15:e7:b0:3d:9f:d7:e2:f5:f3:da:d2:44:9f:cd:
cd:33:65:d6:3d:7b:66:61:27:74:ba:96:fe:47:56:
0d:e1:d4:0e:60:e1:94:e6:9b:79:50:34:d0:f9:eb:
83:0e:82:94:39:e5:6c:46:ae:ad:89:9d:35:34:cd:
7c:96:bf:22:bb:73:69:1b:29:ed:78:40:9c:4f:9a:
e9:56:e4:29:00:6b:1f:fc:23:bd:9c:25:31:5a:35:
a3:20:d2:72:cf:96:fb:e9:e3:0b:ac:07:20:75:23:
08:9f:b1:87:92:a0:3f:b2:1d:c2:ca:1a:26:b8:be:
72:41:c9:6c:04:16:4e:f7:72:b8:90:c4:4e:ad:d5:
68:be:dd:91:6f:01:e4:d5:91:ae:a0:2b:7e:d9:2a:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.208.0/22
IPv6:
2a03:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
10:a7:f5:db:67:15:6b:1a:80:a8:de:a4:0d:94:2c:04:d7:60:
54:ce:7c:08:94:36:2a:2e:19:a5:0e:a2:99:12:f6:e6:d5:4b:
16:23:71:35:0a:0f:34:0e:95:15:0e:92:f9:0b:b3:2d:d0:ab:
12:1b:75:9b:bb:15:30:55:e0:69:4f:90:65:38:f9:5d:96:d7:
53:e7:f8:14:ee:75:68:b3:7d:69:9e:93:4c:be:c9:a7:d5:e4:
c9:5d:f5:9b:8f:68:4e:20:69:5a:0f:eb:5a:d3:f8:f9:13:e7:
05:db:e1:cd:7b:46:2e:ba:9e:ad:90:5d:36:86:b0:d3:4f:e2:
6e:ad:3b:b5:78:a0:4a:98:c8:0c:1e:85:a5:11:e1:d8:39:28:
fe:80:59:ec:74:e4:3c:56:a0:32:61:fe:29:b1:ca:0f:6e:a4:
ef:a5:ea:2d:a2:8e:ad:3b:bf:c4:cc:33:86:cd:7e:9e:2c:65:
82:97:94:35:d1:58:74:cc:8d:ff:f7:f8:38:9c:f8:03:d3:cd:
e0:ea:a0:91:87:e9:1b:6e:27:bf:be:77:b2:85:16:09:f3:b9:
9d:7f:58:08:75:e2:17:44:f8:31:06:cf:b2:79:07:59:c9:b5:
e9:07:7b:da:24:51:80:7c:07:6f:b1:89:46:45:68:58:04:3a:
d8:70:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:13 2024 by rpki-client on console-fra.rpki-client.org