Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
File: wv0sdK1vri3dD26cOf3oMYk65vk.cer (raw, json)
Hash identifier: NIFFeW6vlUJLaAn7GA4YgZrpIDE3zIrNcnJmzrOhHms=
Subject key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F03BE2E2B7B4C9899F6CCA3366192
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.110.64.0/22
IP: 193.42.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:03:be:2e:2b:7b:4c:98:99:f6:cc:a3:36:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:7b:9b:7a:40:ba:b0:f7:5a:99:c5:c3:64:
16:be:40:5e:92:5f:8f:19:f3:23:27:24:8c:83:10:
42:cc:91:a9:bf:2b:c6:5c:08:db:99:5e:84:63:43:
29:a9:09:a9:7f:1a:85:a3:a6:e1:c5:6e:d0:cb:33:
d1:23:98:e1:ce:df:cd:d0:cb:e3:cd:bd:c9:62:f7:
0a:77:4d:e1:df:fd:d4:0f:5e:d7:94:3c:7d:b4:b8:
cd:02:af:44:7a:be:6a:ed:56:63:f5:12:58:64:1e:
71:91:a7:2a:2a:4a:58:1a:5c:2a:ab:2b:d5:3d:5e:
43:b5:68:41:5b:3b:6e:45:19:13:86:ea:04:de:17:
97:5a:0d:02:67:ec:41:08:07:b4:7a:43:2d:ef:29:
03:76:52:b3:70:82:21:d3:a2:e3:3f:e1:f2:24:2e:
b7:f5:81:68:ca:b8:7f:a8:3e:04:a6:13:76:d2:d2:
51:8d:df:fe:45:c8:4b:cb:78:42:ab:a8:b0:f3:9d:
40:63:d2:5c:3e:d1:df:05:f3:eb:ca:cb:22:d8:0a:
11:ea:6d:af:5d:39:81:ee:ef:9c:d7:c4:75:e4:d1:
32:14:85:e1:57:4c:85:63:61:84:fa:d6:d5:47:54:
da:14:4f:51:57:8a:4c:83:45:0e:be:ba:d0:62:b7:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.64.0/22
193.42.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8a:82:d0:54:03:27:6a:9d:ba:57:22:37:04:6e:84:16:97:
dd:1b:9b:62:3f:f9:4c:b2:40:88:4c:be:d4:45:35:fd:3b:9f:
cf:71:a1:ea:19:41:20:56:4e:a6:80:0a:45:8f:1b:16:49:e6:
2c:3d:70:a2:da:e1:ac:bf:68:3c:50:27:67:ae:b3:d5:71:af:
87:5d:7c:fd:6b:79:15:54:9f:34:91:2f:60:1c:f2:9e:32:56:
5f:52:57:e4:c7:43:e5:f0:12:3f:9b:9d:9b:4b:80:09:a0:fb:
38:d5:84:ff:31:c1:d7:b4:20:15:5a:fa:63:fc:46:a8:41:21:
ff:73:bb:75:26:e0:3c:8d:ab:69:43:76:c4:4c:41:89:d9:c6:
5c:92:ca:15:ae:5a:0f:4e:83:65:34:42:a5:82:e5:2b:68:19:
72:4e:dd:78:7a:07:b4:13:d0:ec:0a:7a:58:8e:7c:de:e6:e4:
5b:0b:12:62:17:2f:a4:9a:4e:4b:f9:e0:6a:8e:b8:09:58:92:
91:a0:0e:36:07:2e:8c:2d:26:5a:bf:45:03:4b:e0:e4:e9:2e:
20:54:5b:35:4b:57:9a:8b:23:ab:3b:bf:ef:66:62:ab:4e:56:
04:82:a3:60:23:e3:8e:fb:90:12:8e:5d:24:f9:71:20:c8:c9:
92:f4:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:33 2024 by rpki-client on console-fra.rpki-client.org