Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer (raw, json)
Hash identifier: H+ebpkMvN413j+GjjF02PCf9gEy5dGEtSJL6qH5gl/o=
Subject key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC06EC0C02A4A3E0ED0037F3145BFDA57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Feb 2024 08:15:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.79.72.0/22
IP: 2a05:7240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:6e:c0:c0:2a:4a:3e:0e:d0:03:7f:31:45:bf:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 08:15:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:07:31:35:c1:7b:9e:55:b3:9f:5d:5c:3a:
15:d1:b7:3c:fc:4c:e0:25:ae:5d:52:74:64:e5:8a:
47:7b:ab:2f:89:c7:73:10:4f:05:31:e5:40:b2:ee:
d1:1e:e0:e4:06:bf:70:f0:60:62:c1:4c:78:82:df:
2a:a1:3d:7a:82:0b:88:c8:54:db:76:65:09:2d:01:
18:8a:bc:c2:77:f1:38:4d:16:c2:d2:48:39:23:33:
82:65:b2:51:d7:67:ee:3a:b8:78:fa:c9:b2:e1:80:
94:1e:d9:b2:f1:c3:7a:57:ba:57:b6:ff:83:6d:6e:
18:e7:97:44:c7:b1:5d:9f:23:c5:df:9f:82:79:32:
53:c3:bd:e1:8a:67:e0:73:9c:cb:a6:3a:1d:49:78:
5d:67:fc:d8:83:75:99:1c:dd:6c:28:d4:81:ea:77:
fe:4e:04:b6:26:28:23:dc:9f:e0:e1:33:fe:23:1d:
53:a0:54:2a:80:bb:d0:fc:48:ea:28:7c:d9:c1:cf:
3e:d9:3f:5f:0c:ea:e0:29:3a:e9:2c:72:8c:e2:c2:
03:f7:ee:c6:95:e8:a3:9a:9d:01:8d:c3:67:78:44:
e1:08:11:28:63:c5:69:98:ee:4d:00:10:77:5b:82:
42:91:d9:6a:d6:16:32:9a:07:81:53:c9:7a:be:7b:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
IPv6:
2a05:7240::/29
Signature Algorithm: sha256WithRSAEncryption
82:54:4b:9b:56:4c:30:f9:09:fd:eb:60:a3:f3:a3:66:11:fd:
31:43:4d:10:d6:5b:ce:4a:22:de:df:36:4b:65:19:33:ef:12:
ad:fe:6b:81:31:c8:81:44:a4:80:09:fb:cc:83:d9:91:74:11:
50:8b:f2:14:92:e6:b6:13:15:d4:34:94:f4:7b:79:62:1a:70:
fe:ff:05:3c:97:dd:97:b5:4a:12:fc:f9:0b:af:00:37:c1:26:
21:bd:55:cb:49:02:24:0c:96:1c:af:b5:20:b6:95:4a:1a:39:
a7:89:59:79:37:de:60:6d:3c:9f:d4:59:55:87:f6:94:28:1e:
06:e1:d7:ed:79:33:5f:98:f4:0c:96:22:08:a0:f2:0c:47:22:
a3:91:cc:d7:7f:b0:2a:3e:62:d3:2c:19:5c:71:89:0a:23:68:
92:e4:d6:d1:b0:31:d6:75:e1:85:55:07:42:e3:b1:bf:e0:3d:
35:d9:76:a9:08:78:bd:7f:6a:2d:e9:a3:b1:91:e1:0e:48:fc:
fe:60:07:80:4f:2c:71:91:69:c2:90:c1:80:aa:01:11:29:3f:
f4:79:9e:54:50:c7:c9:84:8f:0a:1f:c8:77:1c:ed:e0:df:ac:
19:c3:d6:0c:7c:b7:59:93:73:0d:a6:46:0b:5a:4f:8f:3b:b7:
d3:08:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:09 2024 by rpki-client on console-fra.rpki-client.org