Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
File: wj_7f9rDV5zXAB3FBjAgFT3s56U.cer (raw, json)
Hash identifier: 0Lu6QXsNZe9+fs7PzdPjOplGDqQwtw4XJZ2/xOfF1Nk=
Subject key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99DFC8141E403BD94DFA8FE7085CEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212051
IP: 185.24.224.0/22
IP: 2a00:7960::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:df:c8:14:1e:40:3b:d9:4d:fa:8f:e7:08:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:c6:cf:27:b8:c6:cf:bc:23:06:8b:2e:47:
aa:00:22:0f:7f:34:7a:ad:24:9a:0e:88:b0:c8:a0:
d3:24:d2:00:88:1c:c4:e2:61:a6:a1:ce:2e:28:ea:
da:9e:a8:6d:69:a4:4f:17:0d:8b:2e:1c:36:11:ab:
38:e2:84:5c:f8:cd:55:b0:c7:e5:c4:47:a7:22:13:
6a:15:7d:93:48:9b:11:3e:37:22:c3:07:b6:22:55:
f6:29:d4:77:cd:c5:4d:5a:eb:74:4b:33:b1:d2:b9:
2d:29:b7:7f:07:df:c3:e1:31:47:00:08:58:fe:32:
1b:43:f0:92:00:dc:53:fd:ab:c9:04:b9:3a:98:9d:
a5:94:c0:5f:6e:50:9b:8a:f0:4c:4e:3f:e3:0b:fb:
24:fe:c4:54:04:86:61:79:d8:e2:6a:a5:68:14:2f:
91:f5:2f:1a:4b:63:89:6f:69:f6:e6:9c:96:3f:27:
a9:37:66:84:28:20:8d:3d:b4:15:57:4f:8c:93:e9:
d8:81:08:b1:72:7a:c7:c5:36:23:28:49:de:7e:b4:
b3:6e:7f:79:66:fd:95:0b:cb:66:07:4b:0f:3b:7d:
ca:b3:15:3b:51:4a:12:55:11:87:0d:18:65:5f:8c:
4f:34:62:3b:5a:71:3f:85:fd:3a:17:5d:f3:ff:8c:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.224.0/22
IPv6:
2a00:7960::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212051
Signature Algorithm: sha256WithRSAEncryption
23:a7:38:6a:cd:7c:62:a2:12:ed:c5:2b:cf:c7:b0:48:03:84:
2c:9b:fe:6a:a2:02:a3:54:ed:08:34:c2:ed:f4:ec:a6:f9:a0:
e9:4e:fb:53:b1:ac:7d:46:fa:a0:72:77:9d:42:4e:96:35:1f:
bc:2c:eb:aa:7c:f8:3f:5b:3a:bb:c0:10:50:50:83:3a:ff:47:
d7:d1:d7:aa:2f:cd:c7:82:17:7b:f2:92:d8:12:de:03:e0:7c:
6a:1f:96:48:c8:58:6d:ca:7f:13:dd:59:af:35:6e:39:2a:ac:
21:94:ab:4a:de:b3:bd:c5:df:df:b5:f3:1e:5f:d8:a8:a7:7d:
11:0e:06:39:a0:f6:7e:ed:44:6d:5f:0c:63:59:3f:55:dc:f8:
a4:94:75:e1:16:93:a4:0f:fb:5e:69:77:82:2e:78:d0:2b:1b:
da:20:88:88:b8:04:df:7e:cb:26:ce:a4:c8:54:5d:2f:81:7f:
64:2d:f6:88:eb:64:10:eb:ee:ba:a7:c3:91:75:5e:86:67:fc:
ab:04:16:8b:cd:b1:51:d0:9f:df:d5:e4:f9:97:c5:47:dd:31:
92:09:86:39:00:95:9c:d8:6c:37:24:1c:ac:22:08:1c:63:8a:
67:66:2f:d2:75:92:38:4f:03:bf:2a:b0:e7:ea:03:36:c3:d8:
61:83:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:06 2024 by rpki-client on console-fra.rpki-client.org