Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.cer (raw, json)
Hash identifier: DWfJwo0kwvc1UaOSAc2UrbPKuTCclgnh+Lxz2DqVEpo=
Subject key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801D49A015FAA6AA648564703F2FDD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.4.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d4:9a:01:5f:aa:6a:a6:48:56:47:03:f2:fd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:06:df:9a:f4:bc:64:4b:24:3c:ee:08:77:
f3:92:36:50:60:dc:e7:fb:d1:5d:39:a7:79:15:af:
42:99:39:d7:cb:4a:de:c2:5f:e3:9f:73:08:43:db:
3c:45:54:93:56:49:c9:2e:06:03:c2:cd:a4:65:37:
a9:30:72:69:5b:d0:91:e2:a3:cc:fc:5b:31:6c:c4:
b4:6f:7d:bd:75:db:95:61:43:16:53:e7:06:c4:ea:
10:72:1d:d9:0e:69:05:2a:a0:b9:bc:2c:96:7b:90:
df:eb:2e:f3:c7:78:53:f3:5f:9a:8f:6a:21:aa:79:
bc:ec:a2:31:db:0d:e8:d9:b8:69:d7:ed:ce:da:2e:
a4:ba:51:72:59:36:79:3f:d1:93:58:3e:bb:ba:3e:
dd:e5:5b:77:85:95:16:8b:a9:65:a4:a6:1e:8b:45:
2a:eb:95:ba:24:13:d8:ab:5b:0a:a8:ec:dd:c7:db:
1d:5e:3a:9f:a2:ff:2e:03:f1:62:38:81:28:d4:45:
9e:c5:41:c2:c6:41:04:a3:97:62:7b:01:ae:f0:ad:
25:da:bb:08:1b:1d:f5:9f:fd:3c:3b:2d:53:e8:78:
dc:b5:fa:b4:af:05:61:d8:3d:2a:f6:ad:c5:66:6b:
c5:7d:b2:0a:09:55:bd:6c:07:88:64:3b:3e:db:33:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:ad:f0:24:ba:fb:7a:cb:76:5f:b2:9d:f2:2e:08:50:17:a9:
9f:34:c1:69:1e:a7:98:c5:15:5f:69:b0:60:0b:d2:c3:e3:f6:
14:90:cd:e7:38:9c:44:8b:2f:ce:ea:16:81:cb:6c:6d:b2:ce:
a4:6d:b3:ad:72:e7:ba:5e:da:19:bf:29:4f:e5:3a:24:6c:33:
c6:ff:95:4f:89:f1:bf:a6:49:66:87:55:d2:bf:bd:bf:5b:23:
fd:95:49:d6:1a:22:2c:9f:d4:d9:f1:70:c5:1a:61:af:3f:9a:
5e:e3:1e:fc:12:73:bc:e7:91:94:4d:51:ba:05:36:99:af:1c:
8e:07:90:19:2c:c8:fe:79:06:7a:ec:ea:df:a9:aa:df:80:22:
33:9a:55:ea:f4:6e:b2:04:be:2f:6a:d9:8d:cb:cf:3b:a4:8f:
76:71:ad:be:25:04:16:eb:10:8a:71:fd:a4:3c:eb:74:f4:27:
be:27:fa:e8:19:c1:25:d9:3a:22:bf:af:db:62:dd:10:cf:99:
39:ae:f9:15:b7:bd:e9:94:f6:8f:bb:f5:66:92:14:08:b5:76:
6a:af:a9:00:fe:91:6b:41:a1:dc:e8:bc:d4:e6:28:86:cb:e4:
fd:47:39:a5:3a:2a:ba:e6:0a:f1:c6:39:72:dd:fb:29:61:44:
3e:23:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:06 2024 by rpki-client on console-ams.rpki-client.org