Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
File: we7iyrhrXuQPwncMqMtcUMYrdVs.cer (raw, json)
Hash identifier: M1Wj0nP87svKymetO85A6S3b69K2+ULXRvG/qlDQvOM=
Subject key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEE2C885A00ACC6190EA44CA56C2FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43067
IP: 91.196.80.0/22
IP: 91.234.72.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e2:c8:85:a0:0a:cc:61:90:ea:44:ca:56:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:00:0e:13:ad:8c:29:28:69:4a:3d:46:37:
09:30:de:26:18:9d:7f:af:52:77:cf:03:6b:0d:e2:
1a:06:42:94:57:74:7c:64:a4:a2:51:99:a4:c1:82:
18:97:92:fc:6d:8f:8c:f7:5a:7e:7b:c4:db:fd:ca:
62:e3:7d:76:f6:3e:6c:77:08:74:e5:9a:46:c1:5f:
2c:74:50:47:a0:03:e3:d8:44:a3:5a:45:32:39:a3:
35:c5:0e:ff:48:7d:05:0c:47:2d:08:f3:37:db:ac:
d1:ae:a9:cb:30:02:7b:0d:af:ff:d8:ef:9e:55:3a:
e7:be:85:69:af:4f:1e:41:eb:fd:3b:63:dd:77:2d:
7c:37:ed:02:59:ec:62:fb:b2:49:9e:3b:b1:8b:63:
56:08:03:c6:23:09:3d:c8:27:de:98:46:ee:04:41:
2d:59:f1:05:87:8f:57:1c:05:f6:0f:ad:f6:97:29:
b3:ed:93:0a:d1:53:ae:82:78:60:eb:84:56:56:07:
6a:d1:3e:eb:36:50:ec:d9:7e:70:28:ad:ca:cc:9d:
15:de:d1:f9:84:b3:32:8e:15:3b:16:cb:52:76:35:
9a:62:9b:d2:c0:4a:a4:42:3d:0a:34:70:a1:3a:86:
c3:b4:b6:f3:ee:0b:a3:47:32:d9:eb:c2:0d:b8:66:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.80.0/22
91.234.72.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43067
Signature Algorithm: sha256WithRSAEncryption
55:cf:bb:03:20:25:6c:a8:32:af:74:36:a4:52:2d:5c:dc:3d:
e2:cc:b3:40:ef:59:6c:b5:f3:59:92:26:db:0f:cc:78:12:35:
83:b8:ef:78:60:4f:e4:1f:3a:0f:d4:5c:57:6e:aa:5a:19:54:
2f:8b:dc:52:bc:f7:c0:9f:d3:9c:75:e5:9e:70:e1:53:e4:b1:
56:28:08:bb:a5:b5:f2:c1:e5:53:ad:d6:28:b8:76:9b:6b:42:
57:dc:47:39:82:fc:d0:0c:c4:b4:4f:35:01:44:31:91:4e:9c:
63:61:32:b2:5f:a9:e0:b2:1e:83:cc:c2:69:4f:2f:ba:42:66:
d3:28:26:57:4f:76:c5:f3:4f:e1:4a:0e:95:1d:6d:77:2e:df:
fc:58:44:31:6a:74:23:3b:25:8b:ef:af:31:ba:31:bd:ab:99:
d8:20:5e:c6:f1:2a:d0:84:1d:05:6b:db:dd:ee:c2:79:fc:b9:
49:4b:76:54:f5:b6:de:c4:e5:1f:12:1e:24:cb:44:7b:f7:b1:
d6:b0:1f:21:54:8c:25:2a:50:af:72:b8:70:4f:36:5d:fa:c8:
ec:db:3a:28:43:59:21:01:84:d5:b3:fa:f5:0b:fc:e5:8d:5f:
72:12:ef:3e:60:b8:dc:29:c7:e5:74:2e:6f:56:2c:29:5f:d1:
0c:12:52:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 02:19:13 2024 by rpki-client on console-ams.rpki-client.org