Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer (raw, json)
Hash identifier: aXyHj+xle0Oz74BnvIWlmAVKt8H/SgX3kn/Y36FSDyY=
Subject key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E3DC12E0D1B2BEDFE0FA9DFBEF058
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12496
IP: 91.135.0.0/20
IP: 93.89.128.0/20
IP: 212.69.32.0/19
IP: 217.144.80.0/20
IP: 2a02:390::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3d:c1:2e:0d:1b:2b:ed:fe:0f:a9:df:be:f0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:b6:da:ab:24:e3:a5:c0:bc:dd:b9:fb:c2:
7a:fb:d0:6d:8b:f4:38:69:6e:b4:e2:0e:6f:4a:ab:
e3:71:d3:46:c0:04:df:6c:9b:9a:b8:44:15:64:74:
f4:75:03:62:ae:59:22:6a:1e:a6:3b:9e:92:37:52:
e5:76:19:62:d0:e1:8f:bb:d2:4a:60:b8:f1:15:5b:
5f:ff:77:57:89:57:0f:fc:f9:cd:43:67:55:47:17:
a6:4a:f9:79:3b:08:5e:34:54:11:9e:e7:8f:ca:95:
dd:2a:cd:ab:33:7f:1b:cd:24:9d:1a:4d:1d:03:ca:
56:ad:00:bc:9d:13:19:42:14:6d:c0:b7:c7:3f:ef:
b0:1e:be:37:53:01:df:b2:b3:91:64:ac:31:5c:f9:
c3:83:12:81:10:18:92:f9:1a:d6:a0:56:98:aa:d2:
cb:cd:fb:5a:9e:b5:60:d2:9c:bc:d4:04:42:4e:12:
ff:f2:7b:d5:1c:56:4c:c4:a8:50:23:e3:43:6d:bf:
ea:4e:a6:ed:25:94:9f:d9:a6:2b:81:0e:92:e9:39:
8f:c5:dd:90:ae:ef:0d:89:e1:cc:cb:e9:32:5d:5d:
0b:71:78:74:c2:0d:05:7a:07:ee:5b:87:fd:70:b0:
10:84:c0:2c:c9:fc:07:38:74:d0:4c:42:22:6c:e1:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.0.0/20
93.89.128.0/20
212.69.32.0/19
217.144.80.0/20
IPv6:
2a02:390::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12496
Signature Algorithm: sha256WithRSAEncryption
44:07:74:de:7d:dd:d5:1b:86:a8:bf:88:45:98:8c:77:49:2e:
64:94:8f:09:8f:a1:cf:b5:99:f8:cf:89:e9:06:45:75:d9:c5:
29:c7:33:37:d3:5d:74:35:ad:79:93:f0:fc:67:b9:ba:5c:90:
de:ad:64:86:ef:1b:2f:06:79:9c:b8:d5:6a:8b:9d:db:74:9e:
f3:cf:ca:83:92:e6:46:31:69:35:8f:bc:cb:f0:12:2d:5b:ca:
46:ca:b5:59:ec:3c:a2:43:70:50:41:93:97:a2:5d:68:4b:4f:
3c:4e:a4:8c:1c:02:90:f3:b1:c4:b3:30:b2:e1:9b:6d:56:62:
3f:dd:65:6f:1b:9f:99:26:0e:dd:8e:00:a1:77:e1:70:7c:aa:
7d:fe:32:78:72:3f:a7:ee:a8:ef:4b:9e:96:d6:7f:8b:b9:f1:
5b:bf:3d:7e:58:1f:6b:21:97:0f:c8:85:d6:04:89:97:0c:91:
36:40:30:39:9b:d1:28:e1:98:ce:c0:0a:64:6a:ee:bd:e4:bb:
7a:b9:12:af:c0:27:64:5a:61:18:95:a2:ee:f2:6f:3e:ba:22:
3e:fd:4d:52:39:27:f2:15:dd:7a:7a:a0:35:d9:f3:fe:3d:08:
9a:47:cc:3c:5c:1c:1e:75:80:a8:f6:c6:3d:e6:b5:bf:33:e4:
31:a9:f3:bd
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYzFbj3BLg0bK+3+D6nfvvBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzBhZWYzOTYzOTRlYTU5NTBkYzc5NTZhYjFiZjQ5MTM2NDYyMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4a22qsk46XAvN25+8J6+9Bti/Q4
aW604g5vSqvjcdNGwATfbJuauEQVZHT0dQNirlkiah6mO56SN1Lldhli0OGPu9JK
YLjxFVtf/3dXiVcP/PnNQ2dVRxemSvl5OwheNFQRnuePypXdKs2rM38bzSSdGk0d
A8pWrQC8nRMZQhRtwLfHP++wHr43UwHfsrORZKwxXPnDgxKBEBiS+RrWoFaYqtLL
zftanrVg0py81ARCThL/8nvVHFZMxKhQI+NDbb/qTqbtJZSf2aYrgQ6S6TmPxd2Q
ru8NieHMy+kyXV0LcXh0wg0FegfuW4f9cLAQhMAsyfwHOHTQTEIibOEKsQIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFMMK7zljlOpZUNx5Vqsb9JE2RiKkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RkYzlh
MS01ODkyLTQ0ZDEtYjQ5MC0yNjdkYTkxZmJmZjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGRjOWEx
LTU4OTItNDRkMS1iNDkwLTI2N2RhOTFmYmZmOC8xL3d3cnZPV09VNmxsUTNIbFdx
eHYwa1RaR0lxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQEW4cAAwQEXVmAAwQF1EUgAwQE2ZBQMA0EAgAC
MAcDBQAqAgOQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjDQMA0GCSqGSIb3DQEB
CwUAA4IBAQBEB3Tefd3VG4aov4hFmIx3SS5klI8Jj6HPtZn4z4npBkV12cUpxzM3
0110Na15k/D8Z7m6XJDerWSG7xsvBnmcuNVqi53bdJ7zz8qDkuZGMWk1j7zL8BIt
W8pGyrVZ7DyiQ3BQQZOXol1oS088TqSMHAKQ87HEszCy4ZttVmI/3WVvG5+ZJg7d
jgChd+FwfKp9/jJ4cj+n7qjvS56W1n+LufFbvz1+WB9rIZcPyIXWBImXDJE2QDA5
m9Eo4ZjOwApkau695Lt6uRKvwCdkWmEYlaLu8m8+uiI+/U1SOSfyFd16eqA12fP+
PQiaR8w8XBwedYCo9sY95rW/M+QxqfO9
-----END CERTIFICATE-----
Generated at Fri May 3 09:42:00 2024 by rpki-client on console-ams.rpki-client.org