Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer (raw, json)
Hash identifier: bAs5Zc8wIwBHRj2mjNr51ndMeq/G4J7XsJsRwIHT7qo=
Subject key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500FB255914F4BBCE0515009E78439B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206031
IP: 193.16.242.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fb:25:59:14:f4:bb:ce:05:15:00:9e:78:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:49:9f:47:77:1c:aa:aa:4f:8d:53:e0:b2:
56:67:ce:ee:03:9a:0d:f5:1a:d0:69:6b:6a:6a:3c:
9f:31:88:bf:6e:8c:9c:03:16:b8:b7:96:b5:c1:2c:
f7:72:70:9b:e7:d8:bf:43:fa:60:6f:7b:40:8e:d6:
18:cf:7b:b8:01:2d:38:e4:a4:9f:68:ac:59:d2:9a:
76:80:c0:c0:a5:5b:47:bc:4e:32:e5:0f:5e:4f:e8:
bc:06:fa:d5:4a:e7:f0:d5:ab:85:02:a0:cf:84:e2:
12:50:56:c8:2b:f4:2a:ab:2b:9d:33:62:14:55:e4:
ff:7e:88:d3:22:81:7b:5a:2a:a0:7f:ea:28:c3:18:
8f:db:77:5b:4d:9e:33:b6:63:d7:1b:18:1c:f7:67:
ed:ff:97:f8:cd:b0:16:48:5f:8d:1c:4a:b9:56:85:
60:75:0c:6f:5c:73:27:3c:68:69:54:3b:83:52:7c:
5a:76:9f:04:05:50:a7:01:c3:49:ea:fc:cf:10:14:
f6:3c:0b:46:e3:94:fc:ba:f0:6c:75:31:46:53:62:
57:70:09:bc:82:64:aa:05:0f:98:8e:fb:67:c9:20:
e9:66:37:7f:32:73:7a:83:6c:da:c5:68:a3:0f:6c:
9d:20:b8:b5:c1:6a:64:a6:51:7a:1b:f9:3c:61:a8:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.242.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206031
Signature Algorithm: sha256WithRSAEncryption
13:10:66:d9:d8:e9:81:fd:2a:2f:f9:7b:11:26:23:f1:8f:7c:
c7:69:eb:88:f0:3a:58:67:8b:67:02:e5:13:ed:fc:61:6b:a4:
9a:72:fe:1f:d4:dd:0b:a4:38:f3:a3:f6:12:be:81:76:17:6a:
0b:f8:4d:e4:4a:61:6a:55:fc:e1:12:57:81:3d:93:97:52:1f:
8e:f8:95:96:e4:33:93:dd:98:ba:88:83:f8:90:1c:8f:3c:eb:
55:5c:6d:59:54:25:7d:dc:87:61:ac:4c:88:94:7d:6c:38:1a:
df:a6:80:1c:4d:bc:a7:93:c9:f1:02:37:43:6d:a3:0f:f4:fd:
73:44:97:4f:c8:6a:12:60:ac:32:86:82:64:3a:3c:90:42:79:
ed:b0:57:b8:cd:58:7b:fd:95:f2:91:ca:27:36:22:c8:b7:2f:
6e:71:3b:ec:4c:b3:18:8d:e4:5c:c1:a7:22:62:41:c1:6a:37:
4b:b1:69:dd:00:2a:c3:6c:08:82:24:b7:b2:9a:a2:b7:51:68:
98:67:12:a3:e7:6f:24:a5:69:ca:2b:b3:54:13:10:c1:48:44:
6e:c5:ea:21:38:fc:76:ca:8d:6c:45:74:be:0c:5d:c2:cf:ab:
c7:fd:2b:21:fb:31:d6:11:6e:ec:9d:1c:5b:59:b8:ca:5c:dd:
15:09:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:19 2024 by rpki-client on console-ams.rpki-client.org