Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.cer (raw, json)
Hash identifier: Q6VCdxXo2e0zljwG2mv8cJelUPOR/7Op1MJILZACsx8=
Subject key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942745D4FBF13AD161D18B0F5E730293A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.4.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d4:fb:f1:3a:d1:61:d1:8b:0f:5e:73:02:93:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:06:df:9a:f4:bc:64:4b:24:3c:ee:08:77:
f3:92:36:50:60:dc:e7:fb:d1:5d:39:a7:79:15:af:
42:99:39:d7:cb:4a:de:c2:5f:e3:9f:73:08:43:db:
3c:45:54:93:56:49:c9:2e:06:03:c2:cd:a4:65:37:
a9:30:72:69:5b:d0:91:e2:a3:cc:fc:5b:31:6c:c4:
b4:6f:7d:bd:75:db:95:61:43:16:53:e7:06:c4:ea:
10:72:1d:d9:0e:69:05:2a:a0:b9:bc:2c:96:7b:90:
df:eb:2e:f3:c7:78:53:f3:5f:9a:8f:6a:21:aa:79:
bc:ec:a2:31:db:0d:e8:d9:b8:69:d7:ed:ce:da:2e:
a4:ba:51:72:59:36:79:3f:d1:93:58:3e:bb:ba:3e:
dd:e5:5b:77:85:95:16:8b:a9:65:a4:a6:1e:8b:45:
2a:eb:95:ba:24:13:d8:ab:5b:0a:a8:ec:dd:c7:db:
1d:5e:3a:9f:a2:ff:2e:03:f1:62:38:81:28:d4:45:
9e:c5:41:c2:c6:41:04:a3:97:62:7b:01:ae:f0:ad:
25:da:bb:08:1b:1d:f5:9f:fd:3c:3b:2d:53:e8:78:
dc:b5:fa:b4:af:05:61:d8:3d:2a:f6:ad:c5:66:6b:
c5:7d:b2:0a:09:55:bd:6c:07:88:64:3b:3e:db:33:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:ad:7b:84:00:b7:17:52:48:f2:4b:0d:3f:2f:1c:58:c3:8b:
de:91:f9:4f:82:d1:1e:e8:e5:e4:c5:b2:7c:ac:d4:b5:c9:1d:
db:f2:4a:16:1d:46:8a:84:b4:ba:a8:d8:2e:1a:24:18:52:be:
3a:dc:78:01:58:a0:87:15:ad:cc:42:9e:16:81:1e:b6:46:46:
4e:06:77:ac:e3:48:c0:41:da:2c:74:06:46:9c:f6:21:26:32:
a5:18:6a:2b:8a:15:fb:b3:eb:e9:e2:39:d8:f3:ed:a5:e5:0e:
67:7c:ee:71:54:fd:9e:e4:8d:5f:77:17:f1:ab:30:94:3f:ed:
20:79:46:57:a5:5c:ec:e7:db:6e:25:b8:f8:d4:d1:61:a8:cd:
07:77:e4:39:2c:92:f1:78:77:5b:a8:ba:ee:90:9c:ff:17:25:
00:41:6f:46:e6:1f:30:87:2a:5c:b1:c6:3a:2f:f8:9c:8f:3e:
53:42:38:5e:8d:41:6b:4e:b7:f6:3c:4a:7b:b4:16:62:25:e4:
48:ee:1a:64:68:60:15:47:ee:be:26:f9:04:5d:d1:38:7b:81:
3d:ab:5e:fd:21:e5:13:59:65:19:f1:cf:0b:84:5e:77:0d:d1:
1f:cd:c8:4b:38:a6:56:31:02:85:0c:78:90:0d:76:0f:58:fc:
2b:57:74:6b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQnRdT78TrRYdGLD15zApOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWMwNWVjZTZjOTA4YWQ4ODgyNTEzZGEzYTI1YTE2MDcwM2JiN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHoG35r0vGRLJDzuCHfzkjZQYNzn
+9FdOad5Fa9CmTnXy0rewl/jn3MIQ9s8RVSTVknJLgYDws2kZTepMHJpW9CR4qPM
/FsxbMS0b329dduVYUMWU+cGxOoQch3ZDmkFKqC5vCyWe5Df6y7zx3hT81+aj2oh
qnm87KIx2w3o2bhp1+3O2i6kulFyWTZ5P9GTWD67uj7d5Vt3hZUWi6llpKYei0Uq
65W6JBPYq1sKqOzdx9sdXjqfov8uA/FiOIEo1EWexUHCxkEEo5diewGu8K0l2rsI
Gx31n/08Oy1T6Hjctfq0rwVh2D0q9q3FZmvFfbIKCVW9bAeIZDs+2zMzdwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFMHAXs5skIrYiCUT2joloWBwO7f2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzM3ZmI0
YS01Yzk2LTRkMTctODZhMC1lYmI2M2E0NTRhOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMzdmYjRh
LTVjOTYtNGQxNy04NmEwLWViYjYzYTQ1NGE5MS8xL3djQmV6bXlRaXRpSUpSUGFP
aVdoWUhBN3RfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjQQwDQYJKoZIhvcNAQELBQADggEBADKte4QA
txdSSPJLDT8vHFjDi96R+U+C0R7o5eTFsnys1LXJHdvyShYdRoqEtLqo2C4aJBhS
vjrceAFYoIcVrcxCnhaBHrZGRk4Gd6zjSMBB2ix0Bkac9iEmMqUYaiuKFfuz6+ni
Odjz7aXlDmd87nFU/Z7kjV93F/GrMJQ/7SB5RlelXOzn224luPjU0WGozQd35Dks
kvF4d1uouu6QnP8XJQBBb0bmHzCHKlyxxjov+JyPPlNCOF6NQWtOt/Y8Snu0FmIl
5EjuGmRoYBVH7r4m+QRd0Th7gT2rXv0h5RNZZRnxzwuEXncN0R/NyEs4plYxAoUM
eJANdg9Y/CtXdGs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:15:11 2025 by rpki-client