Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
File: w3oiGyndRjBow6jVysFGsFe1qe0.cer (raw, json)
Hash identifier: ACbI4Kc1FAm8cqSkqgNOumDOCuN4FAEywJBLMXMugdw=
Subject key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7259C0F59C617AD6ADF8714482C3E52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.163.14.0/24
IP: 2a10:d100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:9c:0f:59:c6:17:ad:6a:df:87:14:48:2c:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:0b:fa:be:18:13:60:b9:89:bf:b7:60:ee:
b1:3d:7a:92:72:10:23:9b:ce:34:e8:db:81:fb:2c:
d7:f4:53:c5:9a:71:b1:b0:ab:e4:bd:5a:10:52:1b:
15:39:90:ff:f6:1d:80:28:38:19:b1:ee:3e:af:6c:
30:af:72:65:9a:75:40:fc:79:48:24:bf:0c:02:a5:
79:8a:df:97:c8:6c:91:24:19:0e:75:e2:0c:c4:37:
a3:f0:6f:76:4a:08:cb:d6:8e:02:e6:32:5c:0c:c9:
c3:73:9c:92:01:e8:e3:60:1a:08:7c:2d:d2:0b:8d:
dc:33:c0:51:37:ec:5b:17:17:69:0c:a9:5e:8b:34:
1a:b8:e4:e6:68:a3:be:bc:b2:7d:7d:19:68:3d:57:
a8:c8:ff:88:3d:bd:4f:0d:3c:84:db:54:a1:03:e8:
08:89:08:98:5d:75:7f:97:e5:67:8b:86:9e:01:14:
e7:f0:77:00:83:e8:82:cc:e8:6c:78:88:57:b0:42:
a2:46:1e:e6:07:a4:1e:ac:dd:87:6f:e7:11:6b:25:
ee:4f:70:19:c6:ce:25:62:5b:cd:04:1d:9b:c8:56:
d0:1e:e4:25:fe:17:2d:49:bf:01:32:b5:b2:f1:d2:
f2:c8:cf:e0:ec:44:57:f9:a0:a6:87:18:98:97:11:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.14.0/24
IPv6:
2a10:d100::/32
Signature Algorithm: sha256WithRSAEncryption
4c:18:c2:0d:d1:fc:e6:3d:08:45:b3:03:fe:bb:ac:49:43:25:
35:fc:82:71:1c:c4:2b:73:6c:c1:97:8e:3a:e9:c6:fd:86:62:
18:8d:2d:56:51:be:85:20:96:4c:07:e4:29:37:2d:69:c9:9d:
5a:32:20:55:fc:c7:7a:2a:08:85:86:73:19:00:e4:7e:38:ef:
0f:9c:0f:3c:74:d1:ab:d6:78:98:f9:da:af:2c:97:ac:5a:36:
4b:91:1c:73:2a:1f:23:3a:cc:cd:4e:b1:88:87:38:9b:1c:7f:
9a:d5:03:88:a7:94:45:d4:08:ba:17:ab:c3:b5:21:4d:e3:98:
26:1c:64:f7:33:9f:75:06:d7:2f:27:ed:06:62:9b:72:50:9b:
37:af:c7:65:fc:f5:80:41:c8:d6:8b:92:62:66:ee:41:14:41:
45:df:94:c2:cc:0f:2b:ef:01:06:41:ee:d6:66:87:34:4f:bd:
aa:d9:ba:a2:84:eb:5c:6a:ec:50:be:ae:7f:55:77:bf:ba:51:
26:58:8b:d6:b7:3a:2b:53:2e:17:21:67:46:7d:65:40:aa:ef:
57:22:f4:a3:29:42:53:db:2b:f9:81:7e:3c:b1:08:9b:cc:28:
06:c9:b8:25:a5:77:e2:59:20:6b:9f:36:34:39:b1:0c:b7:34:
7b:3c:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:05:29 2024 by rpki-client on console-fra.rpki-client.org