Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
File: wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer (raw, json)
Hash identifier: KRrTDbIxY2Md1l36T/dbZnp3dQEdl6nsPB38fY6BSZA=
Subject key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01921520E231143EC9A134C219AE6ABF1002
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 21 Sep 2024 15:08:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.93.181.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:15:20:e2:31:14:3e:c9:a1:34:c2:19:ae:6a:bf:10:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 15:08:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29cc9d3c496f8a92204d40a665edf538190d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:98:bd:ff:eb:ea:43:0a:66:20:75:49:4b:
d5:9e:de:e2:b8:77:df:e1:04:89:4b:c1:da:73:32:
59:7a:0c:f9:a9:12:b8:e7:52:49:a1:a9:a8:29:ad:
16:91:65:24:ec:f1:c4:a1:83:5e:41:94:ec:4c:54:
6d:43:6b:86:ba:7e:5f:a6:30:51:0a:cb:2e:14:a2:
2e:1c:06:1d:0a:18:34:25:ce:4b:83:49:35:50:a7:
9b:13:e4:97:31:ad:4f:ce:32:c6:51:f6:7f:b7:53:
70:35:b5:6b:6f:08:a0:ee:91:aa:c8:c6:70:03:9b:
e6:93:04:27:79:3a:a0:66:3d:ec:6f:a2:5b:72:ec:
2c:c0:f0:4c:e0:bb:b6:33:bc:65:b6:e3:ef:a3:65:
d8:e6:90:ee:a7:3b:bf:2f:62:9f:1a:8c:65:77:07:
f9:b0:93:cd:d1:1c:f1:c7:2c:5b:08:77:66:22:73:
49:da:c0:5c:cb:53:c6:38:30:36:82:f6:85:1e:fb:
54:b1:30:45:5d:ed:bc:9c:7a:a2:5d:7b:bd:21:67:
c2:29:42:12:f2:51:f7:3c:3b:1c:93:92:5e:48:84:
9c:3a:c8:9b:b9:f9:53:4c:3f:e9:d3:ef:8c:43:24:
8e:6c:37:e5:58:44:11:3c:23:d9:18:9d:ac:bd:70:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.181.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6e:94:96:d1:44:9c:d7:b2:d9:dc:20:c9:34:3a:fa:b7:e5:
2b:bd:89:99:82:2a:bb:44:bf:b2:9d:cc:80:eb:94:93:d8:5b:
e1:d6:b9:f9:52:49:f6:12:b0:dc:91:1d:c6:41:44:10:a2:03:
da:93:3d:3e:de:c9:97:ba:70:8a:d5:1a:d2:ed:08:90:a3:0e:
68:77:6a:5d:31:28:3d:42:80:33:d6:bc:60:ac:2f:24:9d:76:
d7:54:cf:74:ae:70:c6:46:a7:9b:a3:5f:a8:d5:0e:7f:24:16:
c4:0d:63:d2:17:09:81:95:8d:0f:30:2e:7b:4c:1f:7a:8a:00:
ac:5f:8c:a3:26:6d:f3:71:16:65:d1:48:bc:4c:62:06:f5:cc:
e1:f0:fe:7a:d5:09:c3:1d:ff:5b:0d:34:af:1b:f5:24:9d:71:
c5:76:30:d7:ce:91:5a:fc:12:93:aa:ed:a7:1f:67:8a:68:4c:
bb:04:cb:d1:c3:da:b8:62:02:33:ae:3b:b9:e0:30:bd:e9:d6:
1d:42:7d:c9:25:7c:a7:eb:e5:23:0d:80:bd:3d:a3:f7:0e:3e:
c8:da:b7:f2:e2:6c:c0:6f:5f:ea:58:a1:c5:42:99:0b:6a:0f:
a7:5a:28:c7:8d:e1:4b:95:fd:ff:51:84:4f:87:22:d0:9c:d2:
fc:91:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:01:37 2024 by rpki-client on console-fra.rpki-client.org