Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wl6VojuowTeC2qlvECmQ0f3Rm28.cer
File: wl6VojuowTeC2qlvECmQ0f3Rm28.cer (raw, json)
Hash identifier: wMP97ud9VxGBuCLvFP+jmm9lRL/7X9HPJmFDt0jPRzg=
Subject key identifier: C2:5E:95:A2:3B:A8:C1:37:82:DA:A9:6F:10:29:90:D1:FD:D1:9B:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F00B96529575BB4C57ACD76EE174F2653
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/a13586-60b5-4158-90c4-2cd3f05d4c74/1/wl6VojuowTeC2qlvECmQ0f3Rm28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/a13586-60b5-4158-90c4-2cd3f05d4c74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 21 Apr 2024 12:55:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215355
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:00:b9:65:29:57:5b:b4:c5:7a:cd:76:ee:17:4f:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 12:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c25e95a23ba8c13782daa96f102990d1fdd19b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:d5:07:ee:cf:d4:93:c1:0d:7d:97:e7:55:
fc:ea:49:db:c8:de:32:d8:72:fb:8c:9a:18:15:80:
1c:fe:2f:8a:2b:3e:86:b8:1e:e8:e9:eb:5a:19:10:
f4:dc:35:c7:6b:30:ac:80:df:ca:06:62:74:d1:97:
06:11:aa:28:ba:1e:8b:f5:c5:d5:6f:33:81:66:76:
8d:cf:bc:c0:72:b5:02:f8:fc:8a:27:cd:71:6a:a6:
24:2a:ed:a2:ec:06:8b:7f:f2:ae:14:8b:3e:66:ae:
0b:83:10:b9:f2:86:3d:f3:72:4c:f5:8a:7d:60:7d:
2a:66:cc:7f:04:13:ab:a8:6e:cc:f5:a6:dc:bd:ae:
c2:6e:a2:1e:fd:8f:9f:7b:51:6b:69:48:41:03:5a:
b3:b0:f5:0f:53:03:07:cd:95:73:fd:0f:05:d7:8c:
cd:72:d1:38:a2:d7:9f:2b:b7:2f:af:6a:8b:bd:25:
92:f5:16:54:00:0c:10:e8:66:09:02:4c:03:9c:7e:
33:fe:a2:e6:19:51:6e:87:a6:95:03:6d:de:ce:2d:
04:e1:76:e9:4e:0c:76:86:9f:e4:67:38:d8:72:7e:
85:e2:31:df:6c:5a:30:0f:39:f0:ca:58:5b:4e:8b:
48:e4:f1:77:98:5e:0f:61:b3:a9:5c:49:ec:06:03:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:95:A2:3B:A8:C1:37:82:DA:A9:6F:10:29:90:D1:FD:D1:9B:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a13586-60b5-4158-90c4-2cd3f05d4c74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a13586-60b5-4158-90c4-2cd3f05d4c74/1/wl6VojuowTeC2qlvECmQ0f3Rm28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215355
Signature Algorithm: sha256WithRSAEncryption
9b:6b:e2:74:17:7e:79:53:c0:dd:22:76:1d:46:9e:89:24:a3:
48:8c:d5:be:36:e3:04:c7:1b:fd:67:4f:89:6a:f1:ea:14:79:
14:7e:7b:eb:58:aa:91:ce:1c:1b:b1:e8:59:ee:8a:93:92:6f:
34:98:5b:fd:13:d8:5f:1c:09:65:97:27:f0:89:93:2e:d8:30:
ab:98:12:11:bf:78:b5:5c:d5:77:0f:72:6e:bc:fa:0c:90:e8:
3e:34:ec:f3:72:b7:08:9a:92:74:24:9c:74:ed:b3:fa:c4:40:
4e:cb:4f:dd:a2:56:af:15:9d:3a:3a:8e:0f:4e:2d:0c:13:b8:
d5:18:31:c2:c9:e3:31:61:6b:bc:a2:1e:0b:aa:28:d7:28:da:
61:44:43:11:c1:58:84:9d:70:84:59:4e:46:03:15:b8:f5:44:
0a:93:79:04:e7:a9:5c:92:e8:5f:f7:0b:dd:15:d2:d1:14:25:
d2:8b:e5:bb:f5:fc:09:b3:4d:28:fa:1c:50:ce:5c:a6:6b:9e:
b4:82:9e:4a:0d:87:fc:39:b4:e7:a5:4f:a0:c5:a3:6f:56:8c:
06:48:e8:62:ad:5b:a5:80:e8:42:07:ec:43:06:4c:a9:74:b0:
56:d8:84:50:e9:5a:a4:32:c6:6f:09:e3:d5:69:cd:9e:3e:17:
93:10:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:11:31 2024 by rpki-client on console-fra.rpki-client.org