Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.cer (raw, json)
Hash identifier: sq4Ukxfzyw40QLh/rWISk//j0YTzKVIjiELjA2XkMo8=
Subject key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D79133357C58F3CCF1AB35DFE50A65637
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 11:41:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.60.16.0/22
IP: 2a02:6f20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:13:33:57:c5:8f:3c:cf:1a:b3:5d:fe:50:a6:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 11:41:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b005411b8b32108342c9f7059502206b9824c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:5a:8f:2e:4a:de:57:2c:1d:66:8a:fc:cc:
c3:11:85:96:3f:2d:7b:3e:6f:80:3b:a8:9c:02:81:
0b:81:c5:04:08:76:b1:b9:89:84:17:92:d2:76:61:
8a:0e:8b:ec:6c:51:31:e7:87:43:b8:e0:55:57:a8:
89:c6:d1:b4:7c:a5:73:da:6e:9c:df:d3:94:86:c1:
62:4d:98:79:a6:c5:36:82:38:cc:6a:08:ac:cf:12:
d5:6d:5d:e7:45:09:99:51:12:2e:cc:10:65:23:81:
57:29:db:18:fc:99:a8:d7:9b:d4:7d:72:dd:29:a5:
6d:4f:eb:1e:ec:bb:c9:5f:c0:f4:bf:16:d9:9a:a9:
34:9e:7d:a9:e7:df:8f:ac:af:ed:c3:c3:d6:e1:e6:
7e:ac:d4:9d:f7:84:bf:58:65:6f:29:07:6d:07:6f:
6c:ad:7a:bd:2c:dc:dd:e3:68:35:e0:0c:59:b7:be:
f5:3b:f6:f6:b7:59:5b:14:a6:24:42:23:6c:e2:86:
02:65:74:b3:d1:06:31:7e:18:b3:5e:44:77:1f:b3:
95:f3:cc:0b:4b:8e:9c:f9:4a:e5:09:c8:61:e7:5d:
14:ae:b6:c6:76:5a:48:4f:65:ec:6e:ef:e3:f5:3a:
ab:62:53:4f:2a:90:10:69:c4:74:a0:4f:ff:ab:1d:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.16.0/22
IPv6:
2a02:6f20::/32
Signature Algorithm: sha256WithRSAEncryption
84:35:bd:8a:c9:03:2b:1a:37:1b:3d:85:84:44:e4:f9:5a:6d:
08:2f:08:98:15:6d:3f:c9:ac:d4:c4:2d:ec:80:a2:22:17:8a:
3d:2f:bd:41:c9:a7:6c:26:83:49:04:60:e1:ba:91:b7:9d:bf:
ad:04:03:03:17:05:b0:98:29:61:30:af:36:8b:9b:a9:3e:8a:
2a:85:7d:6c:62:bc:b0:61:70:33:aa:f4:3f:9b:ac:0e:fc:31:
65:99:17:80:02:f1:11:03:24:cd:6b:a3:47:db:75:8d:fd:8d:
4c:8d:53:51:fc:3f:69:24:a6:4e:18:45:db:6a:8c:4e:1a:b2:
5d:7f:3f:b2:4a:c7:d8:a0:4d:91:0e:f3:b0:e7:de:6d:cc:eb:
a1:f6:66:52:07:53:b7:08:c4:cc:13:ae:b1:25:ba:74:43:85:
f3:94:7c:94:cf:39:62:06:84:06:e2:d4:b4:62:26:1e:4a:a1:
58:5b:d2:06:da:8a:7c:8d:27:d3:bb:7c:1d:4f:6d:14:0e:b1:
17:1a:e1:2c:04:d5:dd:f6:a0:99:25:9f:23:78:01:75:7d:ed:
d5:ff:cb:48:82:52:ea:ca:59:ba:4d:5b:9b:24:ec:88:9e:18:
08:c6:18:a3:d9:a9:d2:54:1a:d5:0e:01:d5:0c:37:ae:7a:dc:
f9:44:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:31 2024 by rpki-client on console-fra.rpki-client.org