Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
File: wtKsHXyezPVli4jxb2E9ez6OjHI.cer (raw, json)
Hash identifier: 5AIZHE3fIhOa4fa2xvwmX8XOFTmLr/u0616DLGq/xqE=
Subject key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EE8CA2468C021976FDEEB7A00721A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211804
IP: 185.250.240.0/22
IP: 2a07:d840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e8:ca:24:68:c0:21:97:6f:de:eb:7a:00:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:26:0c:1e:e3:15:e2:6c:2a:a4:8d:e3:dd:
7e:b9:40:84:a2:04:7c:79:88:3e:f3:81:ce:cd:ea:
ff:44:e6:07:4e:2a:3c:78:c3:86:68:51:d6:e3:b6:
ae:cd:88:29:e8:e3:d3:6e:da:50:8c:43:5a:68:bb:
17:71:12:64:43:59:bb:fa:2d:50:2a:6d:84:ee:0f:
a5:95:fe:83:54:4d:50:03:56:82:5c:e5:e1:f1:dc:
94:51:a4:7a:7b:c6:6f:70:67:9d:71:6a:2b:37:0e:
ea:ee:7c:f1:d0:1f:9f:2a:26:51:8e:b7:49:a1:2a:
e7:33:0a:b7:80:b9:4c:9e:d0:a4:13:a2:2b:94:03:
00:87:4c:f1:4c:51:30:8a:7b:3b:57:93:70:26:b9:
a7:d8:70:06:8c:87:c0:5c:c9:a5:05:c7:a3:22:6a:
85:01:07:ea:cd:d5:3c:70:b0:b4:18:ef:48:62:65:
8d:7a:93:22:d5:c7:fc:6e:82:c1:44:57:92:5e:a0:
0d:db:64:24:14:6e:d3:8a:16:ed:23:9c:7f:ba:c1:
de:b9:4e:79:4a:b2:7c:f5:49:79:0f:eb:9d:b8:62:
05:11:d1:05:0c:09:0e:89:4a:6e:02:34:a5:9d:93:
26:bb:4b:6c:7d:da:b9:41:9e:94:8c:38:46:34:32:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.240.0/22
IPv6:
2a07:d840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211804
Signature Algorithm: sha256WithRSAEncryption
08:03:4e:49:4b:4b:92:8c:2e:40:70:1d:88:79:70:85:19:0b:
92:49:97:98:e7:19:b5:e6:cf:d8:5f:94:ce:9e:ad:56:6e:c6:
88:18:2b:97:0e:27:9a:26:d1:f6:5f:5a:37:74:a9:b8:fb:12:
28:ca:6d:97:29:ea:24:5f:a7:82:58:6d:23:c0:a8:94:c3:56:
dd:46:26:54:ab:cb:18:5d:6a:60:b1:e6:f3:32:d5:12:af:e9:
1c:71:6e:66:24:c3:cf:f2:22:16:02:d2:05:23:6d:b6:ef:2c:
38:e2:18:9e:00:a0:c1:8e:b3:d2:e3:33:eb:48:a4:e2:60:9b:
62:4c:5e:a3:5b:e7:c8:15:a6:fe:b3:ec:8c:ee:6c:ac:bd:a1:
a0:78:76:7a:2a:36:9e:b2:75:38:41:54:a6:df:e8:2c:5b:b2:
c3:08:cf:3b:58:e6:c7:7e:d4:be:e5:8d:4a:5a:be:33:0a:48:
20:ad:d4:70:aa:95:10:a8:d2:62:06:52:b9:8b:23:36:e0:5f:
75:3b:0c:86:60:fa:14:80:d2:f3:bf:25:74:b4:48:eb:b3:82:
c4:30:89:52:8a:77:95:6a:73:3d:76:7f:cf:18:a5:61:12:50:
f5:6b:bb:8b:c6:ae:54:f8:58:89:94:84:73:d0:c4:c7:6e:f2:
ce:1b:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:37 2024 by rpki-client on console-fra.rpki-client.org