Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wtSx8-Wode15zb5yQEew8-yJEcY.cer
File: wtSx8-Wode15zb5yQEew8-yJEcY.cer (raw, json)
Hash identifier: m0wCOXXCx2V2ZtNopqY70JDTjh1TbKMANiT51/m/Ei0=
Subject key identifier: C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01934035A0F43EC9F4DB357E3D7AD390F84A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/wtSx8-Wode15zb5yQEew8-yJEcY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Nov 2024 16:57:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.162.148.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:35:a0:f4:3e:c9:f4:db:35:7e:3d:7a:d3:90:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 18 16:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d4b1f3e5a875ed79cdbe724047b0f3ec8911c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:14:7f:0b:98:34:74:de:53:84:22:b0:8a:
30:a5:b2:c6:fd:68:6b:35:73:b4:e8:c6:ca:cb:31:
46:92:46:2a:bb:04:22:ff:c8:a6:e2:ef:0f:66:8f:
33:6d:cd:60:ce:fd:3a:ce:fb:7c:33:6c:3a:38:39:
2e:a2:aa:0a:27:76:58:f5:7a:1e:d2:a0:6c:32:6e:
f6:06:89:67:05:f3:8c:83:4d:52:81:41:4e:76:ac:
43:75:a8:b2:e5:64:07:40:31:d3:1a:5d:7a:5a:bc:
75:4d:70:dd:9c:15:f8:0d:ec:81:70:3f:65:bc:5e:
fa:70:c1:da:35:36:ef:1b:0d:64:4a:e0:6a:df:40:
cd:f4:25:05:61:17:a9:5a:94:b3:6f:dc:0f:d4:48:
e5:30:92:f4:84:8f:8a:5e:67:39:02:0a:a6:e9:95:
ef:96:d5:a3:69:e9:74:95:5f:30:92:34:3f:b8:64:
2e:7a:f5:38:38:86:c1:84:49:9d:69:ac:73:4c:7a:
bd:50:47:24:9e:65:3b:c5:f4:e5:4b:c8:48:5e:07:
55:8e:09:77:38:07:10:5c:43:91:ff:7a:d2:08:a5:
ba:da:9b:e8:09:ed:5f:e1:36:1a:a8:62:a9:ef:02:
c3:9b:58:1b:2d:eb:25:ba:04:8e:43:9e:7b:28:fb:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/wtSx8-Wode15zb5yQEew8-yJEcY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b2:98:34:3a:71:54:6a:84:46:2e:e1:dd:16:a8:76:b4:49:
ba:2c:c4:a9:c0:c4:b5:f3:9c:15:30:51:05:16:bc:73:7f:71:
57:01:67:dd:fc:ff:97:a1:2b:69:93:a3:60:b4:18:9e:49:4b:
df:54:5c:ff:f2:77:56:8b:da:7c:93:21:a3:5c:8d:b9:a1:ac:
50:51:20:1d:57:6e:40:e5:07:a7:6d:a5:83:e1:fb:7a:46:a1:
17:86:1b:29:9e:5f:cd:2e:42:72:26:71:10:42:74:b3:04:fe:
99:8b:39:bd:9e:b6:5d:db:58:d2:29:f0:a3:29:7d:2f:ae:3f:
1f:c6:b8:b2:b9:cc:8a:f6:0f:4e:b0:d9:ad:06:d7:54:08:c2:
c2:e9:15:21:2a:20:20:51:53:15:07:8c:40:3a:c7:c2:52:58:
ae:6c:77:2e:34:22:b9:5c:43:81:fe:44:67:fa:d5:7f:bf:3b:
38:86:4f:c5:03:5c:0e:35:09:be:86:fb:02:fe:0a:73:20:92:
c5:9d:3a:b3:bb:ce:bf:31:0d:01:7d:07:1c:9e:ca:e4:31:40:
dc:e7:65:e5:cf:84:05:d1:bc:b3:b3:8d:06:dc:11:b0:f1:a3:
83:ba:7d:a8:e5:f3:f6:ef:1b:5b:e9:77:17:4e:e2:c9:ca:9f:
53:b0:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:03 2024 by rpki-client on console-ams.rpki-client.org