Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
File: wjbowhbwWp2eAyfxIivxIZirpdo.cer (raw, json)
Hash identifier: XcpPg9/r+9/11yys+aq1Cp+IX1CfS6rm9HX9jqpq5yo=
Subject key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2418716254227F7915958673A77D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43607
AS: 215569
IP: 193.17.2.0/24
IP: 2a07:2480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:87:16:25:42:27:f7:91:59:58:67:3a:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:13:d0:85:51:43:e9:00:93:7f:18:ac:58:
9e:62:b0:c3:65:54:6b:1b:d3:f4:36:f9:cc:c2:33:
e3:f3:38:3b:0f:7b:a5:4f:ba:f7:de:02:54:a1:7f:
7d:db:2a:26:23:ca:e9:ce:59:dc:87:c5:2c:11:62:
01:d1:e3:0d:6b:89:6f:0a:c8:ae:20:ed:7c:0f:c9:
c4:80:49:db:b7:08:5f:df:de:b2:29:ab:c7:25:47:
2e:a9:b9:ca:ff:70:55:65:7f:df:dc:f2:4f:e5:e8:
c0:e0:62:de:5f:33:42:82:96:e5:42:f9:0e:ca:3d:
2c:25:6a:07:78:56:59:79:f1:82:7f:55:e0:ce:34:
c7:b5:f1:db:9f:03:9d:75:56:6a:0e:98:7f:3d:7d:
dd:27:c1:82:84:c1:d6:de:4d:bf:ca:c0:a9:12:29:
1d:32:5b:f3:34:90:13:d1:a1:be:f9:b8:1d:dd:82:
81:5d:ec:fb:ec:73:f1:d1:72:51:94:95:6d:5d:70:
46:d8:0a:6a:4b:e5:f4:66:4c:e0:ed:a0:c7:d6:1c:
b6:6c:68:e8:60:aa:6c:6c:3c:bc:df:3d:ee:f4:e2:
f0:44:2e:f7:b9:e8:27:d7:de:05:57:db:25:eb:19:
41:96:6c:ae:d3:59:d3:93:ff:2c:db:7a:01:23:40:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
IPv6:
2a07:2480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43607
215569
Signature Algorithm: sha256WithRSAEncryption
91:ec:fd:d6:02:d9:6d:25:13:f5:fb:40:68:c5:87:af:9e:ec:
01:55:11:90:98:5d:bb:f5:e9:e4:32:6c:95:de:b9:f0:78:3f:
33:9c:97:59:bc:bd:46:6b:bc:60:ca:a6:f8:dc:22:5d:e8:6e:
e4:a1:68:0f:97:51:f6:90:1b:6b:2a:0f:d7:bf:a0:89:9c:4f:
7c:16:0f:f6:ee:7b:e8:c6:c5:cd:b6:6e:69:6c:04:6d:9d:54:
fc:33:7b:f7:39:84:c9:eb:8b:c6:6b:d5:d8:7c:8f:a6:e6:6f:
90:6c:0c:74:5e:64:73:15:2c:af:f8:2c:ab:d7:b3:5f:e0:10:
9f:a1:99:df:07:64:14:57:6e:e1:a7:ad:e8:e2:cf:0d:36:fb:
a3:56:2a:48:8b:13:41:42:7f:36:dd:62:18:2a:6a:1b:66:e0:
e8:b1:ef:2e:6f:f4:70:b7:af:f5:97:63:31:78:76:be:b3:69:
44:ff:bd:dc:c2:29:92:da:2d:16:9e:d7:a3:57:12:7d:63:a5:
1e:f8:1e:1a:7a:af:f1:b4:88:7c:27:a5:79:7e:02:01:5a:70:
7a:c5:68:0c:b5:32:0a:12:40:04:09:ea:37:ee:08:5d:cc:36:
65:96:84:f4:fe:65:aa:24:5b:f1:3a:65:c1:5d:fe:6f:cc:ff:
0d:b3:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:11:34 2025 by rpki-client