Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.cer (raw, json)
Hash identifier: CXwOZ66nTTgqd8Iam+lNovcECwqNh1Kof/0vRabS0Eg=
Subject key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D94A6AAB84698A1C0468232900858D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.12.64.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4a:6a:ab:84:69:8a:1c:04:68:23:29:00:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:44:6a:44:23:18:28:e7:1a:ab:2b:25:e9:
65:f5:da:9d:d3:ed:a8:9f:5b:91:cd:1f:c5:34:bb:
4c:5a:fe:c7:5c:31:25:65:c1:e4:8a:f7:be:9e:1f:
9d:40:48:c1:68:87:cf:3f:d6:76:72:2b:4f:2d:c6:
80:5d:16:14:fa:fd:8c:b4:f4:5c:c7:60:4f:b9:f0:
45:78:c3:3d:b4:e4:e8:ad:a2:a1:dc:cf:b2:09:6e:
06:2a:2f:00:ad:cc:4e:fc:fc:a6:a0:46:f9:0b:f0:
e0:e3:a3:d9:80:c4:28:a0:c6:b8:1b:4f:a9:dd:d4:
83:ac:6a:a6:5c:8f:69:10:db:53:ae:66:c0:89:99:
ad:26:cf:bd:62:0c:40:ca:65:b9:2d:c2:34:2a:59:
12:77:aa:e8:69:08:5e:4c:f4:ae:cb:29:89:7b:96:
e5:18:e9:3e:f9:36:55:92:0a:13:f3:43:31:9f:e6:
da:81:de:d3:d4:33:df:4e:07:af:8e:44:0f:aa:c1:
e1:53:42:9a:9b:d7:0b:51:8b:92:d4:b2:20:90:52:
7e:56:70:df:8d:82:f0:d2:a9:8a:df:5e:4a:aa:8b:
82:65:d6:c0:8a:35:bb:d3:c9:25:37:a6:1f:b6:83:
88:ce:c1:8d:e3:79:5b:de:ba:d4:c4:16:f7:ed:05:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:0e:1b:31:13:dc:38:0e:a5:d9:e6:8e:b2:00:71:c7:7f:68:
3d:de:34:7c:76:09:09:71:3c:1b:9f:69:21:52:9a:c0:75:a2:
9c:57:54:e7:2b:5c:08:b5:61:dd:7b:ad:7e:25:84:26:2c:a4:
43:75:62:12:fa:62:29:69:51:4c:d6:ec:a1:e1:b2:79:dd:ae:
05:ac:87:dc:e2:9b:3f:d9:fb:98:99:04:4d:f3:21:96:82:d7:
f0:25:be:6e:74:ce:02:c8:52:15:46:a0:76:21:7e:93:ba:4e:
6a:3f:72:76:88:eb:b3:0b:36:1f:02:cc:08:c1:1c:20:81:f7:
ae:c4:5a:f2:3d:9b:d1:86:1a:2d:e4:d8:41:60:84:53:8e:15:
8c:9c:40:b9:a5:71:ea:6e:a5:23:f3:bf:07:d4:df:1b:b0:63:
0b:53:6d:db:db:75:e4:a3:17:c0:fe:7c:a2:b6:91:1a:0a:09:
a7:ce:2f:6d:9a:76:c4:0c:10:2a:46:06:39:89:62:a1:0d:14:
4d:a3:10:d1:5d:79:31:33:31:8c:ad:d2:28:72:fd:44:ce:58:
f5:40:75:e0:4a:04:3b:03:5e:89:ce:cd:c0:d5:4c:ce:8b:a0:
fa:cb:6d:59:8f:4d:ef:6b:15:c7:c5:73:10:60:82:bb:98:b0:
1e:4b:c3:16
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2Upqq4RpihwEaCMpAIWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDY1OWUxZGQxNDA3OWI1MjFkOTJiMWY1MmNiYzRmZDMyM2UxOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmddEakQjGCjnGqsrJell9dqd0+2o
n1uRzR/FNLtMWv7HXDElZcHkive+nh+dQEjBaIfPP9Z2citPLcaAXRYU+v2MtPRc
x2BPufBFeMM9tOToraKh3M+yCW4GKi8ArcxO/PymoEb5C/Dg46PZgMQooMa4G0+p
3dSDrGqmXI9pENtTrmbAiZmtJs+9YgxAymW5LcI0KlkSd6roaQheTPSuyymJe5bl
GOk++TZVkgoT80Mxn+bagd7T1DPfTgevjkQPqsHhU0Kam9cLUYuS1LIgkFJ+VnDf
jYLw0qmK315KqouCZdbAijW708klN6YftoOIzsGN43lb3rrUxBb37QVW6QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMBlnh3RQHm1IdkrH1LLxP0yPhjTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzhiMjA0
MC04ZDNmLTQxNGItOGRlOC0xNDY0YjRmOTE2NzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvOGIyMDQw
LThkM2YtNDE0Yi04ZGU4LTE0NjRiNGY5MTY3Mi8xL3dHV2VIZEZBZWJVaDJTc2ZV
c3ZFX1RJLUdOTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFwgxAMA0GCSqGSIb3DQEBCwUAA4IBAQAeDhsx
E9w4DqXZ5o6yAHHHf2g93jR8dgkJcTwbn2khUprAdaKcV1TnK1wItWHde61+JYQm
LKRDdWIS+mIpaVFM1uyh4bJ53a4FrIfc4ps/2fuYmQRN8yGWgtfwJb5udM4CyFIV
RqB2IX6Tuk5qP3J2iOuzCzYfAswIwRwggfeuxFryPZvRhhot5NhBYIRTjhWMnEC5
pXHqbqUj878H1N8bsGMLU23b23XkoxfA/nyitpEaCgmnzi9tmnbEDBAqRgY5iWKh
DRRNoxDRXXkxMzGMrdIocv1Ezlj1QHXgSgQ7A16Jzs3A1UzOi6D6y21Zj03vaxXH
xXMQYIK7mLAeS8MW
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:42:45 2025 by rpki-client