Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
File: 58NBW98cAUrhwY58_TPFbwGP7ug.cer (raw, json)
Hash identifier: XSlk2ydGotUG2jH1Y6dzaLt+BMt7v5wYr6fIzqOgKDQ=
Subject key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EECDE38E9719B97863C47551DFE1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.34.4.0/22
IP: 2001:67c:2b60::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ec:de:38:e9:71:9b:97:86:3c:47:55:1d:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:25:c2:0d:6b:bc:6b:5c:c6:e3:d4:38:1c:
c1:9f:64:a3:43:11:33:68:b4:cb:c0:0d:ed:7d:35:
db:23:fe:64:71:3f:a3:ae:43:8a:69:45:de:1a:c0:
80:b9:d6:95:3b:71:38:43:33:fe:e1:06:20:2d:23:
7d:6f:82:5e:4c:93:7b:84:0a:17:c5:6d:16:d9:7b:
bd:8f:99:73:ea:7c:bf:29:46:3a:1b:2c:0c:0b:bc:
e1:70:95:0c:5e:3f:66:13:50:a5:a4:37:2b:8f:2f:
54:ae:85:b3:1e:99:9d:e0:fd:d1:26:c9:f4:1f:03:
c1:32:ae:4f:90:3f:18:48:66:a1:36:85:aa:8a:27:
b4:19:94:74:d2:61:da:44:93:65:e2:45:4d:90:83:
ab:3e:97:9b:52:95:2e:4e:96:13:35:8d:f1:7f:b4:
fe:aa:80:61:97:28:0c:91:0b:f3:24:51:cf:48:2a:
c8:61:61:16:e1:7c:ae:60:00:4e:01:39:0d:58:6e:
3a:95:30:f2:26:fc:37:1f:ee:6a:87:28:b3:6d:7b:
2e:be:5c:74:eb:99:d0:48:d9:ae:b7:52:ba:c6:74:
d7:5c:04:06:9f:77:bf:2b:02:d9:66:18:05:9a:37:
49:db:5b:7f:9a:ae:24:78:69:b8:08:9d:00:ba:f1:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.4.0/22
IPv6:
2001:67c:2b60::/48
Signature Algorithm: sha256WithRSAEncryption
2f:df:05:9b:dd:12:89:34:f7:ca:e2:e3:01:e8:1c:1b:66:a3:
a7:bc:d5:cd:8e:12:c2:6e:90:19:9c:51:c6:99:65:ff:9a:14:
b3:e2:56:4f:29:e3:11:96:37:96:99:fa:78:24:28:e7:93:f8:
a3:20:af:9b:85:ea:51:05:ef:b8:ba:85:06:33:46:f0:a7:2e:
00:c8:49:fe:2b:9e:94:9f:c9:b6:36:18:b4:4c:1c:98:6d:10:
5a:eb:89:d7:f6:bd:87:53:e3:89:4f:34:58:81:e5:68:56:0a:
6b:f8:d5:66:08:4b:1b:6a:c7:b7:da:f2:bb:96:60:89:f0:59:
78:62:97:69:37:88:ca:b3:3b:a4:02:a9:ef:ce:ea:7d:5e:72:
cc:21:8d:46:31:a5:e7:f6:63:44:1a:1a:f2:0d:61:fd:e3:68:
4f:e5:6e:49:e6:0e:ff:4f:57:4c:08:38:a3:23:bc:27:48:fb:
d5:13:e4:e1:61:8b:c0:da:b6:bf:33:cf:8c:44:69:2d:6f:de:
13:c3:c6:7a:09:3a:7b:b4:20:61:fe:61:8f:2b:59:ed:8c:59:
09:6f:a1:25:10:c9:7f:bc:d6:7a:56:49:36:0e:ef:22:69:5e:
c8:55:cd:86:57:d5:8c:e4:df:a3:b3:68:cb:03:64:78:82:1b:
a7:dd:78:7c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAYzFbuzeOOlxm5eGPEdVHf4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2MzNDE1YmRmMWMwMTRhZTFjMThlN2NmZDMzYzU2ZjAxOGZlZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQlwg1rvGtcxuPUOBzBn2SjQxEz
aLTLwA3tfTXbI/5kcT+jrkOKaUXeGsCAudaVO3E4QzP+4QYgLSN9b4JeTJN7hAoX
xW0W2Xu9j5lz6ny/KUY6GywMC7zhcJUMXj9mE1ClpDcrjy9UroWzHpmd4P3RJsn0
HwPBMq5PkD8YSGahNoWqiie0GZR00mHaRJNl4kVNkIOrPpebUpUuTpYTNY3xf7T+
qoBhlygMkQvzJFHPSCrIYWEW4XyuYABOATkNWG46lTDyJvw3H+5qhyizbXsuvlx0
65nQSNmut1K6xnTXXAQGn3e/KwLZZhgFmjdJ21t/mq4keGm4CJ0AuvFjPwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2NjYjU2
Zi1kZDA1LTQ2MTYtYTVmMS01NjMyNDY2OGE5NjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvY2NiNTZm
LWRkMDUtNDYxNi1hNWYxLTU2MzI0NjY4YTk2NC8xLzU4TkJXOThjQVVyaHdZNThf
VFBGYndHUDd1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQCwSIEMA8EAgACMAkDBwAgAQZ8K2AwDQYJKoZI
hvcNAQELBQADggEBAC/fBZvdEok098ri4wHoHBtmo6e81c2OEsJukBmcUcaZZf+a
FLPiVk8p4xGWN5aZ+ngkKOeT+KMgr5uF6lEF77i6hQYzRvCnLgDISf4rnpSfybY2
GLRMHJhtEFrridf2vYdT44lPNFiB5WhWCmv41WYISxtqx7fa8ruWYInwWXhil2k3
iMqzO6QCqe/O6n1ecswhjUYxpef2Y0QaGvINYf3jaE/lbknmDv9PV0wIOKMjvCdI
+9UT5OFhi8Datr8zz4xEaS1v3hPDxnoJOnu0IGH+YY8rWe2MWQlvoSUQyX+81npW
STYO7yJpXshVzYZX1Yzk36OzaMsDZHiCG6fdeHw=
-----END CERTIFICATE-----
Generated at Tue Apr 16 10:58:15 2024 by rpki-client on console-fra.rpki-client.org