Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.cer (raw, json)
Hash identifier: Em/JTWHYmWgJ1OjYjL5tgEfBvHeeobC8lUgU6Wp+AIQ=
Subject key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B389F93989830E5C57543F872EB642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12740
AS: 16115
AS: 49329
AS: 206627
IP: 91.212.207.0/24
IP: 193.142.160.0/20
IP: 194.110.96.0/20
IP: 217.73.0.0/20
IP: 2a04:6cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:89:f9:39:89:83:0e:5c:57:54:3f:87:2e:b6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:04:8f:cb:3a:1d:2f:96:34:78:76:cf:0e:
a4:10:35:e1:16:f9:3d:4f:9b:b8:cc:55:4c:b0:65:
dd:57:ff:32:28:3a:34:7c:57:d0:3c:ef:e0:aa:b5:
3e:ba:74:2f:6d:88:74:ba:63:68:d6:ae:6e:97:5c:
f3:56:2d:b1:b2:43:de:d7:9a:8b:bb:ab:9a:67:05:
08:c4:ca:6d:a7:90:9b:0d:11:aa:70:1c:29:01:4d:
70:7a:3f:e0:7e:27:e3:46:c9:b2:86:5e:84:11:dc:
30:49:55:b2:54:31:26:57:2b:86:b8:f5:1d:fd:76:
9e:f7:ff:84:f6:97:8e:82:fe:1c:3c:f1:0f:ab:42:
84:eb:0f:76:ea:35:b5:bd:47:b6:82:ba:13:bb:9a:
00:5e:27:6f:42:04:3e:83:5f:89:bd:14:f2:16:b2:
c3:2d:5d:fe:bf:7a:d1:99:df:75:0c:ec:ee:fc:bd:
8f:29:61:d9:2e:61:23:37:22:6a:df:31:52:0a:f4:
33:28:55:97:5d:06:16:83:6b:e6:c6:1b:b3:89:55:
bc:ee:2f:7a:a4:f5:2c:69:8f:1e:58:44:25:7a:4f:
95:ce:59:5d:ea:03:24:d2:43:4b:65:19:99:72:c3:
d3:e9:90:d1:84:b8:f5:97:d4:50:1a:af:39:1d:cd:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.207.0/24
193.142.160.0/20
194.110.96.0/20
217.73.0.0/20
IPv6:
2a04:6cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12740
16115
49329
206627
Signature Algorithm: sha256WithRSAEncryption
7f:c1:26:02:cd:6b:86:4d:f7:95:2f:42:9c:0a:e9:98:04:e1:
d4:36:ea:4d:7a:a8:10:e8:7b:0e:10:3d:bd:f2:2a:86:c1:c1:
c1:f9:e3:67:74:99:a9:f7:66:b7:34:4d:13:57:f2:1e:fb:b0:
3a:73:79:58:a2:c1:08:5c:86:5f:bf:79:73:f5:f6:76:fc:54:
dc:b3:1c:b4:4e:da:34:40:b1:ab:57:86:ca:5b:e6:33:47:9f:
6b:1f:29:82:c5:61:22:92:3c:32:55:c3:8e:51:a4:e6:61:59:
15:07:37:71:73:b1:d2:b7:5b:e3:69:d3:d2:03:29:13:f8:52:
97:b2:78:86:04:42:7f:a7:6a:94:31:24:1d:16:2d:8c:7c:6f:
8e:f2:bf:79:96:f3:73:b3:53:95:f9:f5:7d:81:a9:0b:08:17:
88:83:8c:31:0e:13:81:ab:dd:5e:84:88:24:66:d3:f9:19:65:
5e:7d:c7:88:10:a4:a5:f2:4d:74:e3:c1:6f:e9:b0:1f:d2:10:
7a:02:55:2a:fd:be:95:93:aa:a4:87:54:2c:e8:04:2a:53:e8:
bf:0d:3e:7d:b4:85:96:00:d5:74:37:8b:b2:b0:e4:c4:eb:5e:
30:72:e4:26:57:ae:94:a7:a8:d8:ee:5c:4d:dc:18:99:dd:61:
c0:f0:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:07 2025 by rpki-client