Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
File: wV59e7ae-ssMc5ApcsdNctKb938.cer (raw, json)
Hash identifier: VnVpyWYbLvGh8pIIQBnNGbozMj+z69X9t2UBYO2Do2s=
Subject key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD24B3EC05CBB4A522690D38B7582A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56789
IP: 45.144.196.0/22
IP: 93.190.124.0/24
IP: 146.19.192.0/24
IP: 185.102.168.0/22
IP: 185.238.128.0/22
IP: 193.110.189.0/24
IP: 2a06:25c0::/29
IP: 2a09:4800::/29
IP: 2a0f:d440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:24:b3:ec:05:cb:b4:a5:22:69:0d:38:b7:58:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:bc:0e:16:86:b8:8e:9c:02:98:a7:f0:16:
80:e0:d6:d0:cd:f0:bc:de:c5:91:ef:eb:77:1b:97:
a7:36:db:ce:71:ed:f8:5c:bc:46:5e:e7:67:06:09:
c2:9f:7b:0b:43:01:17:4d:2d:73:d1:6f:be:b6:f3:
89:96:0f:fd:90:61:cd:01:b2:12:ed:41:71:09:72:
85:6b:14:94:bf:77:e5:ca:bd:41:7a:a3:f8:19:41:
dc:41:cd:80:f4:86:fc:51:35:b1:dc:33:eb:65:22:
c2:91:b0:d1:1a:cf:7a:55:13:83:02:6c:bf:b2:02:
ef:45:3b:dc:bf:18:2d:5f:9e:8d:27:07:2c:c2:50:
e2:4a:a8:9a:31:12:92:fc:dc:87:19:42:32:a1:4b:
a0:bf:ed:63:3c:18:6e:d6:b8:72:ba:0e:98:5f:ef:
8f:fe:f1:51:a4:a1:f9:59:b3:90:9e:52:2e:18:8f:
6d:a8:7d:f8:43:d5:b6:8d:54:87:e6:32:cd:ee:a0:
32:34:4e:1e:a4:91:39:54:95:3f:18:5e:28:1d:a0:
3e:cd:39:6c:d7:39:e1:1f:34:e7:e1:5c:1f:27:f7:
76:2f:83:18:d7:e2:bf:42:34:77:7d:28:80:13:e7:
1b:77:42:aa:d2:23:42:4f:d6:0e:18:ff:45:45:e4:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/22
93.190.124.0/24
146.19.192.0/24
185.102.168.0/22
185.238.128.0/22
193.110.189.0/24
IPv6:
2a06:25c0::/29
2a09:4800::/29
2a0f:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56789
Signature Algorithm: sha256WithRSAEncryption
5f:46:06:d3:5c:5b:58:c2:e9:3f:91:a3:03:3d:98:3e:26:5e:
17:ab:03:c2:68:1b:b5:f4:40:59:3d:4c:e1:bb:2d:ed:13:1d:
51:00:27:64:55:ef:e2:1b:82:1c:68:3e:9a:68:b6:e4:7d:01:
05:10:8b:05:f8:85:7e:cc:3f:df:58:5f:88:fe:55:46:15:46:
00:95:a1:2e:fe:65:58:22:57:1f:6e:2e:77:64:38:18:43:dd:
de:f2:7d:07:8f:36:53:f7:7e:e1:a9:52:1c:b5:ba:bf:f4:fb:
b2:3b:70:23:2e:c1:65:74:5e:96:bb:e6:95:d0:20:98:fc:8c:
bd:dd:aa:0c:ce:0b:34:f4:d9:cd:66:8d:d3:3d:d6:20:b1:09:
ee:73:86:cb:e4:1f:90:07:bd:24:1e:e1:46:b9:8b:68:bc:26:
90:7a:26:8c:19:15:f3:e9:fe:70:f2:03:c3:b8:33:00:cf:56:
10:73:25:97:2f:50:df:54:c0:df:dc:41:8f:67:23:4d:f9:42:
e4:91:9f:9e:48:62:8f:68:ce:57:d5:fb:4a:35:14:e9:45:eb:
53:a0:db:5c:3d:15:89:d1:fe:9a:da:cc:d1:a8:00:18:2a:07:
58:3a:d7:68:fa:6b:57:11:ba:12:e5:dc:88:b6:4e:37:4b:87:
9f:42:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:12 2024 by rpki-client on console-fra.rpki-client.org