Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
File: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer (raw, json)
Hash identifier: hZvxOjdfOif2d/vOtYicsocYfnIdH1pQhwgUQFG6lH0=
Subject key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01930C633A5B7A3433A4B929DDB6FF6AC3C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Nov 2024 15:27:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35575
IP: 46.149.240.0/20
IP: 84.19.32.0/19
IP: 88.211.64.0/18
IP: 185.25.236.0/22
IP: 185.152.216.0/22
IP: 185.219.92.0/22
IP: 188.127.64.0/19
IP: 209.42.0.0/22
IP: 209.42.8.0/21
IP: 2a02:29d0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:63:3a:5b:7a:34:33:a4:b9:29:dd:b6:ff:6a:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 15:27:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:8f:dc:a1:37:43:95:3d:18:93:e7:29:e3:
63:18:8e:d9:4b:45:51:ab:52:c9:5e:ad:00:5b:5d:
4c:92:8c:01:ad:f6:81:7c:46:da:cd:b9:f6:56:29:
c7:f1:87:6c:09:8f:67:da:76:63:64:1e:3a:09:7b:
c1:a7:2d:f1:ab:ff:cf:24:30:f2:4f:d7:b5:9f:dc:
eb:0f:8a:fb:16:78:85:ed:d3:d2:98:3e:b9:58:0c:
aa:76:3a:c0:d3:c3:f0:41:74:4f:86:7b:51:c9:c0:
7c:0a:13:6c:04:25:f2:54:96:f5:53:8c:84:90:19:
e1:f7:f6:ba:f2:7e:bf:61:72:60:3f:32:28:33:03:
c6:c7:86:33:65:08:7d:39:05:3c:c5:bd:fd:50:d7:
ca:fa:6e:c4:63:4d:68:7c:9c:2d:52:0c:3e:f5:96:
d1:15:20:7a:a2:1f:40:94:86:97:46:cb:70:9d:e4:
4e:a8:01:b7:17:99:6f:b0:36:85:9d:84:1b:86:2b:
cd:f4:72:af:d9:0e:40:e8:96:f8:2d:bf:43:c6:cc:
7d:e9:ce:34:37:ad:f4:43:98:d6:80:88:c8:6d:ac:
9b:e2:28:82:5d:98:32:7b:97:c4:59:4a:f6:fd:5e:
4a:ec:67:7d:3f:d8:0a:07:8d:ce:43:00:e5:67:8f:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.240.0/20
84.19.32.0/19
88.211.64.0/18
185.25.236.0/22
185.152.216.0/22
185.219.92.0/22
188.127.64.0/19
209.42.0.0/22
209.42.8.0/21
IPv6:
2a02:29d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35575
Signature Algorithm: sha256WithRSAEncryption
64:a2:69:2c:9f:42:cc:a6:0d:f1:af:ef:77:33:57:81:00:69:
3a:c5:ac:97:6c:37:f3:44:da:04:11:bc:32:75:16:a8:a4:75:
e7:dd:45:44:c8:d1:f9:0f:5a:a1:3f:8d:9d:af:64:a1:74:43:
c7:2d:7a:ef:50:7a:aa:ab:ac:aa:b6:2d:4c:f0:22:91:cd:0e:
76:2d:b5:d0:d3:36:c5:5f:80:c8:9a:55:87:60:e6:23:df:85:
05:4b:46:31:be:14:d5:23:59:df:2a:e4:3f:4d:cf:f7:d9:bd:
d8:47:6f:f3:76:df:0a:85:35:d6:ce:d3:85:f3:cc:0b:cd:40:
46:41:46:23:d9:c9:66:4d:cb:ce:af:29:da:39:29:33:dd:13:
9a:a4:19:b2:21:cc:c4:3f:85:79:93:0e:13:2e:65:19:8a:13:
c4:79:62:af:92:78:6b:ab:fc:79:c8:36:59:cf:53:79:4a:b9:
ce:0a:c9:f3:23:d9:96:bc:79:a0:56:06:ef:e7:9b:61:65:ec:
58:df:e8:3b:03:6a:8d:86:29:47:c2:16:7d:28:52:66:17:05:
e7:21:2c:0c:f1:c2:1e:9c:57:98:2a:41:2d:09:6d:4d:1a:4c:
cb:33:21:77:ae:af:4a:72:ad:2a:3f:fa:9a:2a:83:3d:bc:20:
59:9a:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:12:04 2024 by rpki-client on console-fra.rpki-client.org