Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
File: wHWxQ7LHigOdslu47hj-klT8kPM.cer (raw, json)
Hash identifier: 7ydIfFBjzXyH6rF1Ws1vQYVa91K+lOoGG9tKGCiWu4s=
Subject key identifier: C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4934ED9674D00CCF2D92139A0033EDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.96.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4e:d9:67:4d:00:cc:f2:d9:21:39:a0:03:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:d6:a6:27:89:16:bd:00:44:4a:d9:26:9d:
97:ed:cb:43:4c:8a:42:27:9b:e5:b3:4c:b6:e0:ce:
2f:ac:46:c6:6d:a7:ff:75:10:58:69:bd:35:3b:fd:
97:65:55:ad:0a:2c:1f:46:42:79:cf:7c:ae:78:02:
f8:c0:79:7d:3f:5f:2b:ec:f3:45:41:84:42:4b:ee:
2f:37:07:05:98:a9:c9:e1:3a:b1:d9:cb:9d:47:e4:
6c:65:01:a6:bb:6c:99:68:61:11:a3:12:df:e1:4e:
96:07:7f:98:70:28:ac:aa:10:b3:df:a0:da:cf:6b:
1f:1d:a4:81:22:9f:c5:07:6f:98:01:57:e1:9a:90:
73:2b:48:12:f6:ef:a8:bc:ea:fe:05:f3:1a:4d:ef:
85:cf:97:02:f9:f8:0d:47:18:24:33:cc:00:c4:a4:
23:bc:55:a1:7e:58:c5:e7:9f:61:89:7f:22:28:cc:
4f:8c:32:7d:0c:d0:11:c1:22:54:5d:49:b5:82:cf:
a7:fb:21:72:2d:60:ac:96:d9:56:ee:f2:c7:1d:e3:
08:96:82:ed:63:06:26:b2:d4:84:19:04:c6:69:33:
a1:4c:15:ae:68:64:10:e8:f3:c6:96:12:e7:fc:2d:
f1:1a:26:1b:16:32:53:04:54:6b:ed:be:fa:b4:0f:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:aa:20:52:de:4e:57:fa:e6:13:dd:25:85:a2:2a:08:94:9f:
ec:fb:94:41:06:90:1a:1a:d7:35:66:b8:1b:87:7b:6f:e4:40:
2f:a0:51:21:65:61:91:73:3a:c5:3a:02:9f:8f:7b:2c:af:b9:
b0:47:08:36:3d:58:7b:bd:c4:38:ed:00:9b:84:60:38:af:b7:
74:eb:82:32:f3:71:8c:1d:d3:3a:8b:3c:81:3c:37:57:fb:3d:
f7:a3:00:eb:de:bc:2c:0b:80:b8:d7:f6:3b:f9:a0:b7:c3:c3:
26:10:2a:01:4e:ee:69:ff:86:00:b3:89:42:ac:e7:42:67:70:
cc:8d:cd:2c:85:bd:8f:c0:88:fc:68:40:34:44:6d:f5:ae:0b:
ea:22:27:ad:c0:7e:9b:2d:e7:66:19:dd:c1:a2:ac:1a:a0:b7:
1e:7d:ad:5c:16:59:54:5f:5e:0f:c2:7c:fa:34:26:36:0e:f7:
32:22:20:38:6b:28:2a:cf:88:0d:19:3c:4c:5b:3d:5a:f3:bb:
2e:8d:50:5e:47:32:2d:97:4f:be:f5:d8:bf:b0:25:90:02:a3:
56:16:e5:9e:07:eb:b5:99:07:ef:87:91:39:29:e1:75:8a:f3:
2b:02:4a:7f:34:bb:20:e2:3a:5d:98:8d:f6:0e:7f:22:b5:b6:
53:e0:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:00 2024 by rpki-client on console-ams.rpki-client.org