Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
File: wSrJsU_SYajSdjqtQXQyvrxJoNY.cer (raw, json)
Hash identifier: KoFHcQwyuAbiIR0crkC2zbZACAN8cv83yZwDwUa5bPs=
Subject key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCF5AF6BF804CE8CD30F0AC57632B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208341
IP: 45.143.28.0/22
IP: 2a0e:e0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f5:af:6b:f8:04:ce:8c:d3:0f:0a:c5:76:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:67:53:6e:5f:37:9c:ab:ce:13:76:cb:ad:
3c:55:12:69:7f:32:df:a8:84:6d:e4:b4:48:c2:f7:
2d:e5:b6:df:f3:df:eb:ce:99:02:6f:a7:49:4d:10:
2f:12:7f:7f:d6:c7:59:60:ac:1a:c0:2e:71:11:20:
71:b4:69:4d:94:3e:c0:04:07:e1:60:ce:9e:df:d1:
d4:8a:c4:65:85:27:1e:72:e7:e2:5f:89:c0:26:6e:
1c:c1:89:58:86:d5:87:f0:a2:b6:46:3c:67:73:88:
d0:b1:a7:13:6c:bd:61:6d:52:4b:7b:0e:90:5c:cd:
bc:46:c5:2b:fa:08:b4:ef:ee:ae:5d:67:73:51:99:
13:f0:5b:cc:11:ea:6e:19:6c:e0:e5:98:c8:05:c5:
22:dd:f3:ce:6c:08:fb:63:e3:07:18:38:8d:57:a7:
a1:53:52:53:5b:10:3a:11:46:4a:a1:c7:df:e7:0e:
c3:6f:b7:76:e9:79:13:1a:3a:f0:4e:b7:c6:07:89:
fc:c6:85:1e:f5:75:32:24:e7:44:93:97:01:55:fe:
95:02:56:c8:ae:24:f5:5c:77:f3:68:88:9f:75:f4:
7f:ed:1a:15:31:57:5e:65:2f:a6:c8:08:d2:e2:b6:
82:d1:93:74:15:47:2d:29:86:fb:46:a8:0e:83:99:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/22
IPv6:
2a0e:e0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208341
Signature Algorithm: sha256WithRSAEncryption
31:54:58:02:8c:30:eb:6c:16:e5:35:27:2c:a7:20:a4:18:11:
d9:ec:2f:c2:0f:18:1b:85:8e:34:56:71:68:85:eb:36:72:4c:
13:2a:61:f7:2d:44:85:b3:ac:10:f7:8a:fc:6e:b5:53:54:d8:
67:97:23:05:1d:80:51:d6:9a:35:be:ee:a5:05:c1:f2:9b:1b:
8c:f9:7c:dc:e2:ae:6a:d0:97:3f:d4:47:3e:a1:d0:bb:c3:7b:
9d:43:a6:fe:f8:af:b3:b1:8e:6b:e1:f5:e2:12:3d:fa:98:a1:
50:f5:66:82:02:5a:53:cf:03:85:c4:4a:2b:12:8e:2f:97:c5:
5f:42:8e:b6:64:28:1f:fa:b1:9a:4f:7e:75:1a:47:38:ec:e6:
a5:9f:4e:98:0b:57:8c:75:37:e8:4d:05:5c:94:5b:50:e9:d9:
00:69:50:5f:a4:bf:60:ab:68:45:c2:c1:14:17:2d:0b:d2:fa:
f9:54:7a:1f:cd:bc:c8:fc:2c:2d:97:86:ad:55:aa:fd:57:aa:
55:8f:9c:4c:cb:cc:f8:85:ed:c7:dc:d4:9e:51:83:09:71:ff:
08:78:33:0d:c6:45:86:4f:47:cb:8a:6f:f4:0a:01:c1:8e:fe:
9c:c1:cd:9c:bd:8c:99:94:e4:9a:50:03:2a:01:ca:ab:26:d1:
d7:f3:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:06 2024 by rpki-client on console-ams.rpki-client.org