Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
File: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer (raw, json)
Hash identifier: gN1DSFaEHiR0fPBE3tnSDtwqoShsPyBWg+/7VYkfrxg=
Subject key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC0D8E93D5BE28163AEB408AD704A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50461
IP: 91.108.192.0/18
IP: 193.106.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0d:8e:93:d5:be:28:16:3a:eb:40:8a:d7:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:57:9e:0a:f2:a3:db:22:ca:00:f1:be:cd:
55:08:a3:c6:a2:22:e8:d1:ac:27:e8:96:ba:a5:65:
1e:1e:f1:6f:e7:c3:fa:d2:a7:93:4b:de:75:91:8a:
6f:88:44:c5:da:70:b0:54:95:9e:ec:7a:e0:58:52:
27:a1:10:0e:f3:f8:f2:f0:da:0f:cc:ee:e0:4e:f0:
11:fb:3d:b3:ad:0c:f2:89:5e:20:2e:6f:89:01:1a:
0c:63:aa:57:50:5c:56:74:85:0e:92:92:a9:bb:53:
07:1f:71:13:53:71:d3:08:f7:d9:98:7f:df:f7:c2:
9b:11:9e:23:2a:5c:b2:a0:a6:f8:15:c7:1d:89:c6:
53:0e:47:7c:6d:ce:29:a8:9a:9a:64:56:2b:61:e2:
39:28:75:d2:66:7e:31:98:31:e3:7a:6c:69:79:62:
46:92:b0:42:7e:d3:c1:a3:45:0c:6b:7a:49:ed:0a:
99:f1:1a:33:44:4a:88:77:4e:31:9d:a5:64:eb:78:
b7:39:36:6a:36:45:7e:c4:d9:ba:c3:99:0d:37:65:
a4:96:b6:70:7f:83:e5:f2:b0:fd:c4:3f:67:d3:bd:
1c:66:1f:06:59:91:34:ab:11:ac:3a:05:9c:94:d0:
1f:9f:ba:d8:43:7a:79:0e:97:5a:44:45:54:6a:45:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
193.106.196.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50461
Signature Algorithm: sha256WithRSAEncryption
16:56:41:24:52:33:ed:ea:e8:f5:16:ea:1b:fe:85:3e:db:eb:
ac:e5:f4:e4:61:11:33:fd:f2:6f:d1:6c:2e:9a:56:1c:aa:63:
8f:d3:e4:2a:89:43:fa:e5:fd:86:2c:4d:6c:02:e7:a9:dd:08:
95:fb:60:f8:38:8a:77:e1:70:d9:62:22:15:48:d5:a2:2b:4e:
50:d4:5e:c2:c6:7d:86:e9:03:b6:50:e4:8a:2b:c5:8e:b5:7a:
2f:d1:8f:68:df:f5:28:60:0d:b8:63:21:d0:a8:51:78:f4:7f:
b6:ef:14:46:86:f8:a7:f5:70:f1:9c:d3:d9:e3:7f:1d:dd:61:
89:b2:a8:24:49:4d:03:34:c1:c5:cb:02:66:b3:82:c8:42:38:
22:5e:12:2d:fe:5f:e5:1e:8e:47:51:af:2c:5b:64:62:e0:03:
94:09:fa:c0:ab:fd:e7:3a:9e:30:50:26:ec:d0:0d:75:51:c8:
06:c9:e8:b6:3e:4e:22:8e:a5:a4:bd:00:92:5b:5d:84:0c:03:
bf:4b:3f:13:9f:cf:6f:18:42:ab:4b:9a:cb:71:53:fe:6e:39:
01:7a:63:a9:44:de:a4:24:e8:de:eb:23:ad:0a:12:df:96:d5:
1c:51:06:d9:d3:c6:c0:79:9c:5a:01:09:c9:77:af:fd:99:31:
5e:cb:ac:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 03:50:37 2024 by rpki-client on console-fra.rpki-client.org