Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
File: wPadL0dEdNu1f2vsjC1l1eDClmE.cer (raw, json)
Hash identifier: zLCo8DyLKqcUbbJwk6FclvMnRcQPH8ouPJRXkB2tPuw=
Subject key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D622666BDF94E066FA20618507EFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25285
IP: 81.89.32.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:62:26:66:bd:f9:4e:06:6f:a2:06:18:50:7e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:22:19:df:c5:da:32:40:ec:3d:ea:3e:80:
ea:46:60:c6:4d:5d:12:2a:0c:fd:04:47:0d:95:a5:
34:0c:9a:91:53:f7:30:e8:9b:98:fb:30:94:ca:bf:
d0:bc:f7:05:26:9f:46:d7:da:25:29:97:1f:95:0c:
ad:c0:db:d9:e0:61:62:fa:d2:12:c4:73:4e:7f:84:
47:df:9f:17:c9:7b:17:19:fb:f2:c0:94:59:e4:8a:
63:dc:b2:ce:d7:f1:62:33:3e:fe:e0:8d:1c:a6:b6:
0a:48:fb:7b:f5:e0:95:a6:02:9c:1e:7a:05:6c:1a:
45:8f:b1:0a:7a:88:68:0b:34:2f:64:3e:cb:8e:13:
4e:91:3d:5d:44:30:95:76:19:dc:62:d2:f4:22:de:
5f:38:92:45:bb:29:a6:77:c8:da:78:a9:5f:a7:a6:
9a:a0:9a:57:f7:b1:ef:80:62:53:88:79:3e:78:4e:
f0:98:d1:78:6f:7c:89:b6:da:c0:1f:a0:7e:17:22:
6f:f0:78:61:e3:64:46:c4:9f:87:fd:40:ff:23:5c:
73:7d:84:a0:83:de:35:d5:64:23:c8:21:fc:02:b5:
74:bd:d0:5a:1b:51:33:a6:3d:92:2f:a9:66:66:7c:
ed:1c:bb:0f:58:c1:6d:c4:d3:54:7a:0e:4d:81:ee:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.32.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25285
Signature Algorithm: sha256WithRSAEncryption
9b:98:38:e4:51:90:33:93:29:d8:af:22:32:d6:8d:45:1a:42:
8d:58:57:f7:e9:2f:90:41:84:58:e5:c4:fa:6d:de:ab:84:21:
84:c4:70:96:e1:d3:17:cf:c1:e9:26:d1:60:d0:9f:6c:e2:d5:
b1:ed:13:54:1b:a5:ca:c2:44:de:c4:cb:23:4d:99:94:8f:4d:
f9:66:cd:9a:35:f8:9f:6e:f9:ad:57:41:4c:56:87:00:de:b9:
f8:b8:02:b8:1d:d0:c4:5f:8b:ee:85:97:4a:3b:88:10:97:de:
15:95:f3:19:31:6d:ac:81:0c:f8:2c:66:76:9d:e0:4a:fc:3b:
0b:ef:3e:34:fc:ef:9f:30:a0:3a:03:2d:8b:df:18:7a:43:ea:
5b:20:32:36:5d:5e:31:43:22:ac:e3:0f:57:71:99:f6:9a:23:
51:aa:31:93:0b:4a:a1:ae:84:dd:d1:9b:93:c3:ed:0f:ed:cc:
45:1a:45:95:2a:23:15:36:74:18:ed:58:d5:78:f8:45:2f:e8:
72:be:10:43:c2:f0:aa:0e:66:d8:56:0d:1e:ab:e8:67:5f:55:
1d:22:bc:33:d4:6c:b6:5f:6f:c9:fe:7f:39:27:76:a2:e0:c7:
a7:59:64:fc:f9:17:ae:eb:db:45:be:78:a7:04:1c:8e:d4:36:
01:cb:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:39 2024 by rpki-client on console-ams.rpki-client.org