Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
File: wuLumMR1LMeKgj6b-aTsmt8cO80.cer (raw, json)
Hash identifier: a6rGJ4IBBB/rstceqYLKi/FI8f7boeFC71e4vcz1u9k=
Subject key identifier: C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C45727F43B418343DF0BB82283308
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43527
AS: 198390
AS: 209351 -- 209352
IP: 78.41.192.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:72:7f:43:b4:18:34:3d:f0:bb:82:28:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:6e:a3:af:2f:44:de:e4:cb:6d:33:d6:b7:
aa:91:e1:a0:5d:00:6e:ce:40:83:a3:72:99:0d:1d:
58:f4:15:5b:9d:35:1f:56:47:9f:80:f9:1c:64:c6:
b2:b8:1a:57:78:68:b0:9c:e2:39:ff:9a:2f:93:3b:
7d:6c:54:82:6c:68:0f:af:1a:74:7b:a5:84:81:5d:
62:dc:1d:2b:40:25:19:ef:f4:44:f7:c1:72:59:aa:
cf:3e:19:33:7e:89:6e:69:8d:cb:4a:09:9f:5a:01:
1b:89:d2:4a:9f:11:1f:f5:5e:a0:01:40:03:a5:82:
31:09:67:6a:9f:39:54:62:08:50:96:aa:7a:34:2c:
a7:89:19:06:35:4c:64:78:cd:1e:96:cb:8d:0c:79:
6a:34:2c:c7:a9:4a:aa:e3:b5:65:ce:47:e1:35:25:
72:fd:41:b0:4e:2c:28:89:c8:59:52:74:70:48:59:
62:03:03:29:13:b8:b1:70:28:4e:ff:09:f0:61:5b:
85:90:f6:f0:5e:07:1c:26:9c:21:49:d6:56:83:fd:
b3:43:f3:f1:2a:18:d6:cf:2f:e8:6e:a8:d0:d7:fb:
69:17:93:d5:ca:3a:1d:ac:c4:f0:95:5c:f5:24:1b:
aa:4c:58:77:3e:fa:0c:56:46:a8:47:55:5e:4c:bb:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.192.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43527
198390
209351-209352
Signature Algorithm: sha256WithRSAEncryption
9f:ac:80:90:5d:f5:53:d3:86:c7:62:2b:c8:ea:2f:cf:97:ed:
67:6f:d3:c2:63:3d:ec:bd:38:46:51:fa:d4:18:e1:18:1e:ea:
43:ee:c9:2e:bc:1d:12:42:c6:e9:dc:f4:a1:bc:f3:3f:2f:63:
1f:9c:99:53:5c:ec:4f:75:6d:fb:e5:8a:35:de:d7:84:76:e7:
a6:50:1d:d2:21:77:81:86:5b:f8:c2:8e:d2:f2:ba:3b:0c:1e:
3f:18:aa:d1:5c:ee:4a:06:bf:97:ae:c4:72:2a:c5:58:2c:59:
fc:95:ab:14:bd:39:5b:e2:2a:f8:3c:0b:31:d7:54:ba:88:ad:
c3:bc:19:52:3d:41:15:17:b1:22:7e:ce:d5:02:43:29:d7:95:
46:7a:2d:ce:d5:ec:8e:d1:7e:f4:b3:4e:4c:fe:66:96:9b:7e:
41:03:80:f2:66:dc:0f:89:50:4e:9b:b4:19:15:ac:e8:e5:9d:
3d:29:d9:de:52:50:a3:9b:54:ff:1d:60:64:b8:97:2e:3e:41:
50:30:03:49:c3:f3:0b:da:cb:3c:94:23:c6:0b:62:29:7f:3f:
f0:16:41:d5:bc:56:de:4d:75:db:10:14:e0:27:a2:82:80:14:
71:15:47:70:84:ab:11:7b:d4:2b:d1:4b:4b:64:52:2d:5b:6f:
ae:ad:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:53 2025 by rpki-client