Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
File: woWhR044Yn4wGlUb4076RYKlzzk.cer (raw, json)
Hash identifier: zwEN4FlW709ZGPPUbj/vG1KebNyeKF8bYy5k32imYdI=
Subject key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5002F7A50B0C90836ED555D739A5ACD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201419
AS: 201822
IP: 81.173.42.0/23
IP: 185.62.160.0/22
IP: 2a03:520::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2f:7a:50:b0:c9:08:36:ed:55:5d:73:9a:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c285a1474e38627e301a551be34efa4582a5cf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:c7:07:5f:73:68:a4:bc:c8:fe:68:df:ac:
5e:d9:3f:33:23:16:05:69:4d:26:b5:34:d4:fe:7c:
c0:44:8c:2a:18:00:b7:2d:25:3c:6a:b4:6f:e0:24:
7d:aa:15:bc:5d:b7:b4:30:31:a1:c2:9f:13:59:15:
98:8e:6c:f6:2b:e7:6b:09:8a:e8:4b:cc:4e:ff:dc:
d7:7f:0b:3a:3f:28:d3:6c:32:b5:e9:6c:0d:97:07:
16:c1:e7:26:3d:59:60:c3:c6:8c:68:73:99:b1:8c:
34:7d:6d:b0:08:94:1b:3a:96:fd:dc:c0:0e:0d:2b:
3e:38:96:dc:0e:f4:5c:60:27:77:71:2c:8e:1b:04:
67:be:f0:e2:03:b9:87:43:08:f2:a4:b7:67:04:16:
6a:c6:9c:00:a3:1f:98:3f:56:cc:eb:5a:09:de:9a:
a9:a2:4e:c3:ca:34:55:6b:9e:a8:ef:35:6e:43:d4:
ce:0b:3a:20:46:d8:f6:48:52:3f:20:42:e2:0f:54:
44:6d:89:54:ce:6f:a6:d9:82:14:73:72:83:95:93:
ba:64:7f:6f:f3:6c:1b:5a:b3:1e:08:28:8e:fe:03:
f2:91:b6:ef:7c:1a:25:01:43:37:81:83:54:90:85:
56:1a:f9:05:57:ea:b8:59:18:c3:4c:81:5c:55:74:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.42.0/23
185.62.160.0/22
IPv6:
2a03:520::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201419
201822
Signature Algorithm: sha256WithRSAEncryption
0d:81:f7:82:2b:e5:95:a4:59:fe:f2:8f:3b:8b:d3:3f:1b:6f:
51:a8:46:99:7f:3e:ab:93:e4:97:d9:17:ab:83:9e:33:f9:2a:
6a:73:26:79:55:b4:d2:08:e1:77:db:96:ee:02:ba:a6:92:94:
07:90:46:82:88:54:b1:da:f6:d0:c5:a3:d5:1f:ed:59:02:a6:
7e:2a:61:ab:e3:22:63:79:ff:64:81:d5:a4:46:4f:bf:f0:60:
11:46:a5:56:37:86:1e:8b:66:43:90:8f:f6:d0:87:94:1b:57:
a9:2d:32:38:84:1f:72:b0:d1:a2:87:91:2a:10:89:2f:0e:34:
c7:04:a1:67:4f:87:6e:9f:2e:99:12:6a:35:e5:86:4d:01:a4:
3f:b6:82:d9:ae:c8:e1:e6:59:4f:3f:d9:1a:1e:52:2e:44:30:
6b:65:47:db:2f:b8:77:9e:88:c7:b5:cd:af:af:5e:fb:56:9a:
4c:09:77:cc:bb:0a:66:a5:df:02:42:29:68:73:81:65:29:11:
2c:af:9b:96:09:c7:56:3f:8a:24:c7:a3:5c:4f:2a:27:47:91:
fc:b6:85:4c:e0:5e:67:92:d7:45:e7:a6:79:14:33:7f:48:ff:
23:9a:87:c6:69:7c:3f:82:b8:1a:ad:92:cc:f1:d7:08:34:86:
c7:f2:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:29 2024 by rpki-client on console-fra.rpki-client.org