Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer (raw, json)
Hash identifier: j4ZwYdOQi3SVt8WhVxre9qEpjJiDkUwFD+um70nNOPw=
Subject key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E550EDCB852C676C145BFED3989DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12496
IP: 91.135.0.0/20
IP: 93.89.128.0/20
IP: 212.69.32.0/19
IP: 217.144.80.0/20
IP: 2a02:390::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:55:0e:dc:b8:52:c6:76:c1:45:bf:ed:39:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:b6:da:ab:24:e3:a5:c0:bc:dd:b9:fb:c2:
7a:fb:d0:6d:8b:f4:38:69:6e:b4:e2:0e:6f:4a:ab:
e3:71:d3:46:c0:04:df:6c:9b:9a:b8:44:15:64:74:
f4:75:03:62:ae:59:22:6a:1e:a6:3b:9e:92:37:52:
e5:76:19:62:d0:e1:8f:bb:d2:4a:60:b8:f1:15:5b:
5f:ff:77:57:89:57:0f:fc:f9:cd:43:67:55:47:17:
a6:4a:f9:79:3b:08:5e:34:54:11:9e:e7:8f:ca:95:
dd:2a:cd:ab:33:7f:1b:cd:24:9d:1a:4d:1d:03:ca:
56:ad:00:bc:9d:13:19:42:14:6d:c0:b7:c7:3f:ef:
b0:1e:be:37:53:01:df:b2:b3:91:64:ac:31:5c:f9:
c3:83:12:81:10:18:92:f9:1a:d6:a0:56:98:aa:d2:
cb:cd:fb:5a:9e:b5:60:d2:9c:bc:d4:04:42:4e:12:
ff:f2:7b:d5:1c:56:4c:c4:a8:50:23:e3:43:6d:bf:
ea:4e:a6:ed:25:94:9f:d9:a6:2b:81:0e:92:e9:39:
8f:c5:dd:90:ae:ef:0d:89:e1:cc:cb:e9:32:5d:5d:
0b:71:78:74:c2:0d:05:7a:07:ee:5b:87:fd:70:b0:
10:84:c0:2c:c9:fc:07:38:74:d0:4c:42:22:6c:e1:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.0.0/20
93.89.128.0/20
212.69.32.0/19
217.144.80.0/20
IPv6:
2a02:390::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12496
Signature Algorithm: sha256WithRSAEncryption
30:fe:5f:42:8d:92:4a:e6:3a:99:6b:94:d9:b1:01:91:04:33:
22:14:2c:6c:bc:08:c5:97:4f:69:2c:dd:cc:83:4d:a9:43:81:
43:12:92:53:96:a9:a1:b5:63:9e:e3:b3:e4:74:72:06:c9:c9:
8e:da:e7:c0:80:76:76:13:8d:a5:70:39:10:f6:a9:00:4c:8c:
0a:a2:1d:ea:7c:78:9e:3e:b3:a0:e6:52:87:37:7b:a2:ff:91:
4e:b4:a5:54:fa:95:89:41:07:f8:60:9e:28:ce:57:ee:1d:16:
c6:79:25:7b:ee:ff:22:b3:38:6d:38:9a:a4:30:a0:68:d1:b2:
cc:af:c2:06:b7:60:f7:00:5a:36:52:28:b1:d3:58:35:4b:3f:
23:04:1a:80:72:d6:f8:56:b3:e3:a3:d2:7a:b7:da:b3:09:67:
d6:4f:70:a0:d4:0c:11:5a:69:9b:8b:f2:56:ca:23:15:ab:1b:
3c:ce:35:5e:c8:37:98:47:b1:3e:26:8f:f5:7f:b8:f7:0b:e0:
38:c2:50:b1:3a:a3:a8:10:f3:b1:56:a3:ce:c4:b9:b2:ed:07:
2a:92:7f:2e:9e:74:68:bf:4c:ed:09:f6:99:2f:ef:22:f6:19:
54:8c:68:cb:09:cb:ea:1b:aa:50:8d:41:5f:31:97:6b:b9:f4:
39:fe:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:24 2025 by rpki-client