Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer (raw, json)
Hash identifier: 2Yg6qrTwxLvYehKHmMbkMd6/ODEs0cGorX1eK1V1T2s=
Subject key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D40796C66317A0507E925EF90B5808EB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jan 2024 11:55:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.235.172.0/22
IP: 2a0d:6d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:79:6c:66:31:7a:05:07:e9:25:ef:90:b5:80:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 11:55:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:36:5d:4e:14:ab:f3:63:f1:a0:9c:56:01:
4d:59:10:13:df:73:8d:16:3a:b3:e9:2a:03:ce:28:
1a:fe:11:25:41:45:cc:1a:63:25:28:e4:fe:84:0a:
42:d1:41:74:3a:ce:9b:b9:06:dc:2b:27:ea:04:51:
86:8e:a3:72:6e:a7:0f:82:4a:d1:12:17:cc:92:bb:
d4:d0:f7:2b:8c:89:f1:43:16:1e:d5:e5:77:69:84:
36:e4:c2:f3:a8:e7:a9:8b:ea:88:37:7b:83:4f:94:
2c:44:b7:a5:7c:b8:11:d7:17:ed:3b:65:09:8a:6b:
1a:8c:d2:b2:cf:0d:38:a7:44:cc:02:c6:b7:49:d3:
9c:87:0b:5e:d5:98:1c:53:ae:26:59:ce:62:21:a9:
3b:c6:f1:2b:5a:0a:79:3a:c9:db:50:64:69:68:b8:
ee:8d:41:18:e8:3a:21:10:cc:79:3e:04:48:e4:c8:
28:ad:90:a8:45:b7:a4:a0:09:b6:d5:45:93:de:86:
0d:eb:a3:e6:eb:0f:ed:a5:a2:86:9c:80:f2:25:0e:
67:e9:76:d3:24:3a:a8:0a:43:0a:04:97:1e:38:53:
fd:e8:06:32:79:db:2f:0b:89:ca:9f:4a:37:d7:b2:
cc:e4:f9:56:26:5b:c7:2d:81:65:c0:9a:05:d7:7c:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.172.0/22
IPv6:
2a0d:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:7a:a2:68:a6:1d:97:32:16:b3:27:96:6b:db:9a:d9:49:84:
da:1f:92:73:fa:b9:d0:6e:96:57:f3:3a:a3:82:a7:56:82:6b:
d3:ed:a4:a5:91:35:78:f8:90:fe:66:1a:e0:b2:1e:03:7b:c2:
c5:eb:78:a0:78:eb:3a:d6:4c:15:d3:02:c8:26:1e:45:27:f5:
7b:2f:30:bf:83:cb:26:47:61:33:d7:62:1c:d5:8e:da:db:b3:
a3:a7:15:cc:51:4c:de:9a:65:3c:3c:17:d7:a7:fa:c9:61:4e:
f0:80:62:95:a3:d0:1b:bd:88:71:bf:bc:6f:1d:d5:a9:83:85:
ed:a5:01:0d:7c:cb:63:b6:b7:dc:af:59:71:a3:30:3f:5b:0a:
7e:95:2d:dc:c4:2c:73:df:28:49:7d:97:7b:7e:fa:dc:7a:5a:
c9:82:93:1d:5d:35:9b:5b:ca:84:6d:50:db:b5:cb:8b:dd:9d:
7a:a4:5a:38:bf:a5:33:92:c4:b8:4a:70:a9:0c:da:5a:dc:81:
a9:ab:79:6b:63:6d:b3:31:b2:e3:7a:82:64:c1:ee:b3:41:3f:
79:08:1b:3b:34:98:ce:01:fd:1b:f9:63:dc:06:ee:5b:f3:1a:
7e:95:e1:c9:b9:7c:7d:82:be:06:bc:b3:9a:bc:94:42:26:f3:
92:4a:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:02 2024 by rpki-client on console-fra.rpki-client.org