Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
File: wXLnuWJS7qhzJjPTulGpsFWDp7M.cer (raw, json)
Hash identifier: 3yD8MjwRFniLAqYPAIVdp9h5gb3vTHB70DBwZL3CRzs=
Subject key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B80452FF3A41237349C17711192A99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31420
IP: 193.151.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:04:52:ff:3a:41:23:73:49:c1:77:11:19:2a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:3f:45:d8:8f:e2:db:b4:01:91:2a:ba:c5:
45:03:cd:94:c3:80:27:3b:cb:a0:24:7d:24:a2:f6:
64:b4:62:96:8b:ba:d5:bb:14:6b:4f:68:73:db:8d:
30:dd:7c:61:56:e9:ac:1d:78:42:17:06:f1:78:ba:
10:40:77:99:48:4e:87:21:6b:a6:2c:23:0d:71:30:
73:70:5b:c4:90:a1:6e:ae:a4:00:87:6d:cc:18:cd:
ed:af:22:0d:f6:56:d3:f8:66:a1:03:48:25:65:db:
4c:38:a4:9c:8c:8f:58:a7:10:d9:aa:62:92:4d:44:
a6:55:16:d3:0b:3c:85:c6:06:52:91:40:dc:c6:e7:
0a:68:ef:1a:0d:99:25:35:32:d4:cd:1e:20:5a:53:
51:f7:82:9b:98:2a:e6:bb:0d:35:94:5b:9e:5e:d3:
9f:99:f5:cc:3d:e7:25:56:ce:ff:58:c5:b4:89:7e:
25:cc:5b:55:da:52:dd:01:5c:a9:75:d7:ed:10:6a:
45:90:0f:bd:dd:f3:36:c2:ce:68:ff:3f:03:59:41:
a6:e5:0a:9b:23:6f:22:4a:30:22:81:c2:df:82:84:
07:b4:d1:da:45:93:81:3c:3b:ef:af:48:11:15:33:
24:d2:98:92:ef:73:5b:e6:5a:75:24:64:0b:6f:14:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31420
Signature Algorithm: sha256WithRSAEncryption
12:de:6f:af:18:1d:f1:c4:de:35:51:58:f7:a2:f7:33:16:c7:
20:25:31:38:8b:ff:1a:de:6a:23:d1:23:f6:34:4e:9a:39:a8:
14:72:eb:b7:9e:b1:e2:59:4f:0c:c8:19:51:c0:bd:f1:c8:22:
82:e6:72:16:c0:3e:db:12:46:8b:7e:7d:c2:d1:23:5d:a7:8c:
7d:a0:87:33:8a:f0:81:d8:5f:ae:6d:ce:24:4e:fa:3b:cd:d9:
36:3e:da:7e:35:fa:b8:30:e7:c1:73:20:57:34:a7:79:8d:35:
be:40:cd:1f:e1:fa:6c:b3:61:cb:d3:df:c5:7c:6a:65:c6:1e:
60:2b:7b:fd:bb:a8:3b:2d:74:6d:d1:cf:e1:ca:ed:ed:35:ac:
41:4d:8c:06:f9:d4:29:8a:78:39:24:f3:64:75:65:41:31:52:
1d:8f:50:9d:1c:72:e0:e0:cd:09:88:a8:58:c7:24:84:66:b1:
36:94:60:21:d3:aa:a6:35:dc:b4:b5:5c:bd:fb:42:7f:f8:9a:
f6:e8:74:3c:8f:4b:3f:20:a4:d1:10:b7:b3:9e:ee:a5:e0:d4:
73:c5:2f:ea:af:43:a6:35:f1:cb:f6:a9:2b:c3:a2:95:d0:9f:
ca:d9:93:8f:fe:74:39:28:b9:93:f7:ec:b2:86:af:59:e8:be:
d0:cd:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:48:39 2024 by rpki-client on console-fra.rpki-client.org