Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
File: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer (raw, json)
Hash identifier: BMI/w0KVjEYSffInk8CHkjrv22X4A0DNZ/133KjVF6A=
Subject key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC17CC25AC6DEF530731E09E49223F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211607
IP: 195.230.103.0/24
IP: 2001:678:e70::/48
IP: 2a10:b640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:17:cc:25:ac:6d:ef:53:07:31:e0:9e:49:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:87:8c:d2:3b:23:da:2e:68:99:b5:52:63:
fe:0d:66:84:11:ca:cb:19:9a:aa:d5:0c:8d:36:db:
e1:77:e4:3c:37:a1:ae:11:69:15:aa:b7:c8:63:71:
ca:1d:5f:2c:af:5a:ed:80:9f:43:76:c8:a5:fa:50:
b8:02:fe:79:e0:6e:7f:30:d9:5d:dc:62:42:32:fd:
43:dc:29:38:37:aa:6a:38:19:ce:41:be:f3:00:c6:
c1:b3:67:e8:46:f3:3e:02:63:9b:b5:70:72:27:d0:
26:4d:38:6c:e9:e5:29:43:5d:1f:91:81:cf:98:6f:
9a:48:55:74:7d:e4:de:fd:87:76:24:2c:ac:db:92:
a5:73:ad:43:a3:93:06:f4:26:c7:54:13:cd:12:a2:
3a:a6:d7:99:24:72:93:89:a6:f0:a9:89:86:fa:57:
7b:1a:c2:8c:f0:d9:02:c4:86:fb:33:08:8a:c5:d5:
3b:6d:c7:92:05:9b:cd:24:e1:c5:54:c9:0f:42:59:
6f:69:46:ea:d7:1c:f1:f3:ab:52:b9:48:32:9a:6a:
68:f3:91:20:f2:3f:4d:3d:b5:89:7e:96:2e:20:72:
7b:28:7e:8e:55:a3:92:20:9d:8f:d6:6c:d9:e5:e3:
3d:79:82:02:6f:fe:3e:52:80:8a:0c:66:dd:8e:1e:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.103.0/24
IPv6:
2001:678:e70::/48
2a10:b640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211607
Signature Algorithm: sha256WithRSAEncryption
9e:b4:b6:38:d8:27:ba:a3:04:c4:f7:2b:2f:a9:25:fd:42:d2:
68:24:5a:b6:ad:67:b6:64:38:b8:e9:80:4f:ee:4b:a5:48:3e:
af:35:88:ba:ab:59:97:2f:cf:e0:19:0b:cd:69:f1:35:9f:e5:
45:84:95:9a:24:de:00:a3:6f:ae:ef:bf:ff:45:0a:0f:43:8c:
7c:24:11:5d:05:ba:5e:d0:fe:84:4a:4f:13:a5:f9:32:9f:61:
2f:39:4e:ac:a2:49:67:2f:ce:2d:b1:29:03:c3:61:2a:42:28:
62:72:47:d7:9f:d6:9b:27:f2:86:35:12:0f:b6:5f:b1:a8:40:
19:e3:fe:f1:c5:33:16:56:42:57:1c:fb:41:35:1a:8d:8d:db:
e0:13:cf:7e:79:88:eb:6b:fc:ef:82:be:25:7e:e9:14:60:d3:
a7:a8:24:46:11:a2:bc:00:1e:3f:32:fd:c2:d0:fa:96:1d:6d:
d6:ad:2e:77:c6:ab:48:c4:46:7d:90:50:33:d0:1c:57:39:61:
93:6c:c8:94:3c:92:8f:b7:c2:02:32:df:34:3e:d5:54:66:4c:
f9:da:d9:25:02:61:61:d9:ba:32:0c:95:09:6e:17:be:fa:ef:
a6:f6:ee:2a:ec:d1:e7:e0:7d:74:6b:d6:e4:1f:20:68:3c:6c:
09:24:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:01 2024 by rpki-client on console-fra.rpki-client.org