Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer (raw, json)
Hash identifier: E/jr7VBzdwcj5/wHmQAqQu++hYZAqRGrMpJ9gMhauRE=
Subject key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7E6129C2A8CC13882D5AF68BABBDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208626
IP: 185.64.76.0/24
IP: 185.170.10.0/24
IP: 2a0c:dd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e6:12:9c:2a:8c:c1:38:82:d5:af:68:ba:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1db67b85104e4db598fea15678699c92473bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:2a:cb:4b:a7:30:c7:57:fa:ef:cf:b0:05:
84:13:71:dc:46:d8:9b:7b:1f:8d:1a:b7:af:c9:9a:
94:25:35:19:a0:62:26:28:59:a0:b2:22:ac:f6:d9:
94:06:06:cd:7a:60:a4:b5:f2:5a:96:16:1b:34:ee:
86:38:36:3d:ad:2e:58:e8:7a:f5:14:9a:01:bd:46:
2c:2c:f1:54:62:83:a6:21:3c:a2:fb:27:01:d7:c0:
d3:29:4f:2b:fa:50:12:d1:c1:93:13:37:b8:5a:75:
b1:7e:08:77:60:76:28:be:68:82:2a:0d:c7:7d:89:
69:ec:b2:6a:ff:dd:48:a8:85:82:d0:9b:b0:cb:b8:
cd:ac:6a:3c:3b:d3:8e:8f:88:44:ec:8c:d8:71:eb:
89:e2:d9:49:4a:35:c2:df:94:4f:75:1a:fb:6b:a2:
f9:1e:aa:73:ba:9b:ef:7b:56:d1:9b:87:92:b2:48:
1e:09:3b:1a:49:bc:8e:22:c6:02:70:f2:a1:a0:6c:
7f:40:10:92:6a:0c:e1:6c:bf:ee:85:00:fd:79:eb:
83:55:bd:aa:e9:8a:20:cd:42:b9:0b:f2:9f:e4:c6:
17:ab:cf:b4:07:33:2d:f0:05:0a:1f:f8:da:7a:04:
54:68:af:62:4f:38:a4:bb:fa:ca:cd:4f:98:ad:cb:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.76.0/24
185.170.10.0/24
IPv6:
2a0c:dd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208626
Signature Algorithm: sha256WithRSAEncryption
a2:25:51:2d:66:66:51:a9:7a:7e:70:87:77:67:d5:10:8f:23:
e4:67:02:f1:a9:3b:99:3d:7f:e8:4c:6b:d5:c8:37:ab:ab:a0:
40:8e:fe:d1:0a:2d:0e:b7:3d:34:eb:6b:ed:24:4c:3d:e1:08:
41:77:03:17:88:71:f1:88:49:01:55:57:12:6e:3d:e4:7f:71:
12:8c:28:05:ad:94:2b:fe:4b:59:d7:ab:23:04:e3:c2:74:90:
c7:aa:2b:f7:1f:4a:76:cf:96:4b:69:d5:7a:c7:80:33:4e:aa:
f5:1d:16:8c:4b:72:df:ca:9c:78:b6:cb:76:d1:6b:1f:3a:48:
d9:5c:c4:ee:3d:10:35:a5:ce:2d:6a:66:88:53:59:28:23:68:
6c:a2:9d:af:06:76:b0:a4:90:e0:18:05:a0:aa:8c:9d:c8:eb:
70:bd:bd:0b:71:9f:1d:e3:fe:3a:36:28:c9:8d:58:fa:de:46:
7d:ee:07:6e:73:df:51:a3:93:64:1b:b4:62:b6:85:74:1d:22:
e1:ff:d8:b1:4d:96:a6:da:11:1c:10:78:af:d9:dc:1a:97:a6:
9c:fc:43:04:87:bf:9f:06:fe:db:98:6f:e5:98:8a:c0:c8:99:
19:3d:5a:4c:30:87:65:69:03:59:71:0f:04:5e:94:e4:29:37:
54:3d:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:23 2024 by rpki-client on console-fra.rpki-client.org