Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
File: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer (raw, json)
Hash identifier: 2UADfqM/cOBrYp1Jeou+fl8AOKJtSIzGNDUNjYRQIio=
Subject key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCF594326DD7582942B87D7CAB4502
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42675
IP: 45.148.16.0/22
IP: 46.227.64.0/21
IP: 193.187.88.0/22
IP: 2a0c:dd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:94:32:6d:d7:58:29:42:b8:7d:7c:ab:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:96:7e:69:1f:68:87:47:6d:e1:89:87:80:
7b:d8:c9:36:1c:dc:3e:39:ad:5d:c8:cc:0f:f7:94:
d4:98:d7:8c:d7:70:bb:14:1c:fa:14:23:a5:c9:ca:
34:50:bb:35:d8:d2:23:bb:d1:6d:17:3c:e6:d8:7a:
90:cb:be:ba:47:cc:65:66:81:86:8b:1a:36:3c:ee:
09:7a:55:4d:1f:6c:fa:76:c5:b0:30:ed:b0:2a:35:
f0:a8:d2:48:83:8a:5b:7f:c1:dc:f1:3d:53:f2:27:
3e:56:ac:c0:c3:15:b8:42:b9:fb:27:02:0d:5a:ef:
a4:a7:53:10:64:b8:1f:65:33:20:00:0a:6e:03:4d:
3a:67:5a:bb:a9:f5:bf:db:aa:55:58:09:3b:23:f8:
27:90:80:27:8e:5c:9f:e4:13:8a:7d:a1:53:e0:04:
db:dd:a2:87:e0:0c:de:e6:80:3a:a5:2c:e0:ef:d9:
d8:b8:fc:a9:d0:78:60:76:7e:f9:d0:ab:1a:45:88:
d7:03:a7:2e:7f:8e:0e:55:fe:95:35:48:c6:2c:ce:
0d:b2:dd:76:a5:0e:c6:36:7f:72:4e:c4:10:75:e4:
b4:5b:31:5b:b6:eb:df:cd:46:cd:8e:a0:96:a7:3a:
fb:f7:c3:eb:e5:3b:cc:21:81:e2:4e:fc:00:74:0a:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.16.0/22
46.227.64.0/21
193.187.88.0/22
IPv6:
2a0c:dd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42675
Signature Algorithm: sha256WithRSAEncryption
53:75:31:5e:91:28:f8:1b:c0:2a:84:f6:c2:ff:36:64:3c:e7:
57:52:ea:59:78:a2:ad:12:9b:7e:0d:46:e0:8a:7e:0d:3b:98:
48:e7:a5:cb:dc:17:0e:51:78:8d:0e:bc:09:66:d4:8a:68:49:
90:55:be:4d:24:af:d2:34:b3:67:89:f5:a8:fb:31:a6:2a:db:
aa:fb:3d:fb:04:9f:01:71:eb:c5:72:28:cd:3d:ae:d4:47:1d:
2f:da:f2:ab:87:3e:e4:12:65:41:a4:68:fb:f9:0f:d6:17:d6:
c5:09:a5:32:91:5f:de:ea:0e:04:65:c0:25:a7:61:83:3c:d9:
39:7e:f8:d7:a7:02:64:a4:fc:75:0e:90:39:3a:45:17:cb:e2:
5f:ae:21:08:80:f0:3f:ed:d8:7a:88:4c:fe:41:67:e5:84:7d:
fa:cf:47:3e:97:d2:c2:98:39:de:73:01:a9:f6:45:b2:1b:b4:
15:e4:d0:cc:6f:24:42:da:12:a8:2c:56:d6:1a:77:ca:8e:48:
d6:3d:37:cd:02:8d:ca:6b:c1:c7:c7:dc:2b:5e:29:d2:48:8e:
69:db:cc:b1:f5:82:24:82:5c:b9:55:90:83:04:81:af:87:6f:
10:2c:6a:0a:94:d9:22:e3:8b:2e:85:8c:80:8c:a6:4b:47:d9:
db:f2:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:07 2024 by rpki-client on console-ams.rpki-client.org