Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.cer (raw, json)
Hash identifier: cGSEgP2ZpqlR7dcYdnd7Ed57ybugNZx+MMwcFNUSLNg=
Subject key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FA1387EB72FF7BAB99F05D8B1C520
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.60.16.0/22
IP: 2a02:6f20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:38:7e:b7:2f:f7:ba:b9:9f:05:d8:b1:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b005411b8b32108342c9f7059502206b9824c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:5a:8f:2e:4a:de:57:2c:1d:66:8a:fc:cc:
c3:11:85:96:3f:2d:7b:3e:6f:80:3b:a8:9c:02:81:
0b:81:c5:04:08:76:b1:b9:89:84:17:92:d2:76:61:
8a:0e:8b:ec:6c:51:31:e7:87:43:b8:e0:55:57:a8:
89:c6:d1:b4:7c:a5:73:da:6e:9c:df:d3:94:86:c1:
62:4d:98:79:a6:c5:36:82:38:cc:6a:08:ac:cf:12:
d5:6d:5d:e7:45:09:99:51:12:2e:cc:10:65:23:81:
57:29:db:18:fc:99:a8:d7:9b:d4:7d:72:dd:29:a5:
6d:4f:eb:1e:ec:bb:c9:5f:c0:f4:bf:16:d9:9a:a9:
34:9e:7d:a9:e7:df:8f:ac:af:ed:c3:c3:d6:e1:e6:
7e:ac:d4:9d:f7:84:bf:58:65:6f:29:07:6d:07:6f:
6c:ad:7a:bd:2c:dc:dd:e3:68:35:e0:0c:59:b7:be:
f5:3b:f6:f6:b7:59:5b:14:a6:24:42:23:6c:e2:86:
02:65:74:b3:d1:06:31:7e:18:b3:5e:44:77:1f:b3:
95:f3:cc:0b:4b:8e:9c:f9:4a:e5:09:c8:61:e7:5d:
14:ae:b6:c6:76:5a:48:4f:65:ec:6e:ef:e3:f5:3a:
ab:62:53:4f:2a:90:10:69:c4:74:a0:4f:ff:ab:1d:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.16.0/22
IPv6:
2a02:6f20::/32
Signature Algorithm: sha256WithRSAEncryption
91:39:c4:ea:fc:da:20:9f:4c:16:4f:2f:41:42:81:dc:c4:43:
5b:f6:fd:54:20:af:af:d1:39:a5:f0:b7:41:68:dc:57:69:00:
b9:72:00:4e:be:cc:ac:6f:7e:07:37:0c:9d:a7:4e:ad:09:3e:
e3:5d:4c:29:4c:87:bf:76:24:63:57:6c:d8:d7:25:fc:39:db:
af:e9:69:3b:e1:e3:3d:9c:ff:0c:bc:b5:35:e6:c5:4d:af:5f:
3c:b2:cc:00:b4:26:22:b4:99:80:07:d1:3e:9d:2e:ae:be:0b:
1b:df:d5:7a:04:37:eb:be:98:25:20:cd:53:50:c4:72:0a:6c:
ce:d8:ab:7a:ed:68:8e:54:0c:01:71:eb:d2:a7:e1:ac:67:95:
85:9e:84:4c:31:db:99:ae:3a:71:d0:4c:5b:ab:4d:6e:b2:cd:
a9:91:1c:28:d6:15:e8:c5:f2:4d:bd:d4:1e:77:15:9c:e7:15:
31:ba:b0:e4:a4:81:f6:c4:f1:76:81:8e:32:e7:4a:8a:e3:4a:
e5:0c:84:a1:72:b9:4f:47:df:0e:a6:27:a5:cb:63:83:37:61:
b6:1f:17:3b:19:bd:c2:a7:02:3e:27:1c:8c:42:ea:f3:c4:ff:
a0:cc:bc:28:dd:4e:ae:f8:7f:1d:e7:48:ab:ad:04:c0:37:78:
d3:7f:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:29 2025 by rpki-client