Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.cer (raw, json)
Hash identifier: UjzzpM8mk2MaAiNxYFKFMOYIuU8z9tHAFMo6to+8m0A=
Subject key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34917EED821D40DEE470D5F95724B44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42176
IP: 92.42.80.0/21
IP: 2a10:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:17:ee:d8:21:d4:0d:ee:47:0d:5f:95:72:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:fe:65:7d:b0:fc:91:1b:8c:cc:90:00:24:
16:a4:a5:36:a2:2a:d9:c4:1c:8b:06:73:00:97:11:
64:6e:a6:b1:e4:65:21:90:3e:d9:2a:3d:a8:2f:13:
4b:66:99:11:da:b3:d8:da:99:44:05:e6:63:a7:83:
a0:53:05:5e:8e:07:60:ce:e2:64:ea:c7:db:0b:f9:
86:d0:8b:2d:b5:02:fe:85:4a:f8:f3:20:03:97:80:
78:11:24:60:30:a2:9c:fa:cd:a6:06:46:8e:a9:9f:
7e:15:15:e0:6f:fb:49:18:ab:c7:0a:03:f8:bd:b0:
ee:b8:6f:8f:71:7c:21:b6:7f:da:ad:1f:f9:ec:6a:
99:f5:f8:94:88:d7:a0:20:4e:29:46:d0:ba:e4:4e:
dd:1f:2e:56:1c:f6:1a:69:d7:ca:b3:af:49:99:d6:
9e:6d:88:81:8a:f5:90:6d:90:b5:5b:56:0e:3b:58:
64:a2:10:b4:ef:17:7d:bc:7d:d9:f7:85:b4:99:00:
a7:e0:09:a2:ed:9d:75:bc:c5:f7:0f:8a:6f:89:a2:
48:85:b8:3a:fb:87:64:53:a6:ce:3e:9d:1f:ec:02:
32:79:c2:11:8c:16:ba:34:fc:8c:90:01:27:3e:e8:
dc:7c:2a:3f:39:7c:df:47:b1:1c:23:f2:43:22:27:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.80.0/21
IPv6:
2a10:8e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42176
Signature Algorithm: sha256WithRSAEncryption
25:35:a5:bc:e9:d9:ca:49:1a:66:57:84:e1:38:29:cd:89:b0:
33:ae:ec:12:b0:f4:18:d0:4a:29:93:3e:a4:e4:85:d8:ef:72:
cd:60:61:d9:5d:2a:09:56:ed:95:9f:db:8e:b2:de:72:2e:11:
10:29:16:f7:ad:c5:0a:2e:ef:75:d4:96:20:47:26:2f:64:f1:
3d:ec:44:ee:48:24:91:5c:09:d8:97:fd:b6:bf:15:1f:32:cb:
f0:c0:22:c7:7b:d1:86:be:af:12:d7:68:ae:af:56:45:7b:da:
5e:ab:fe:2d:d7:d5:41:59:35:a7:41:05:38:3e:e6:22:36:d5:
1c:53:14:80:c7:93:05:8b:25:0f:fe:38:ae:9f:4f:24:98:63:
05:79:5f:25:58:c5:ff:a3:1b:82:6c:6e:11:27:80:74:0d:56:
1c:53:06:ae:b6:bb:85:a7:ca:44:04:19:53:a8:8e:51:c4:b3:
84:14:fa:7c:5f:d3:a5:5a:6f:5d:de:6a:bc:44:de:bd:5d:d1:
83:b2:14:58:fe:f6:76:78:1d:90:d8:74:47:05:b3:1f:e3:ed:
53:88:d0:2d:38:b4:e7:71:02:68:a2:29:1f:d9:bc:d0:ed:9c:
32:15:c7:36:59:98:6d:02:fc:20:9a:af:30:0e:22:60:f6:96:
bd:a6:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:20 2024 by rpki-client on console-fra.rpki-client.org