Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer (raw, json)
Hash identifier: Mx/UNgUCwVG+sTU09waj3ssgIbAsZn8Hsl/lFo27xl4=
Subject key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7D1171A6793AE9E19A3B8D10FA4A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.208.40.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d1:17:1a:67:93:ae:9e:19:a3:b8:d1:0f:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:a7:ca:49:da:f1:41:bb:7b:b1:e4:23:49:
c2:9c:aa:b6:8c:6b:80:fc:c5:65:35:e3:41:c6:e8:
ed:a0:64:f3:07:7c:ee:66:12:d7:1c:d4:58:4c:0b:
d1:de:25:e4:89:ba:02:83:d3:9a:89:02:cf:6c:f6:
48:ea:ec:fb:ff:9d:8d:87:6d:41:af:b1:1b:03:4a:
1e:44:3f:45:bc:19:5e:03:e5:02:b3:dc:ca:67:61:
96:a5:3a:25:d6:b2:3b:0b:02:67:59:fb:57:1b:7f:
28:9d:11:1b:0c:a6:d7:8f:45:85:b2:f8:4c:34:99:
c6:a1:2d:09:84:8c:4f:c1:bf:e9:b1:82:5d:fb:0b:
07:78:90:78:19:c0:00:35:0c:40:50:25:54:bb:4d:
3e:a8:5c:14:2a:2c:ef:1d:98:db:fc:f6:4c:fc:d7:
91:d4:6e:e4:d1:cc:a5:7e:23:d6:2d:94:08:04:65:
e3:b1:8f:29:8b:7b:c0:49:7f:74:7c:de:3a:bf:29:
d4:f3:b6:53:f8:12:3d:2b:bc:59:90:d6:1e:a6:ea:
46:81:9d:9c:e1:21:e7:bf:e6:64:81:76:58:8e:19:
02:2a:64:36:e9:3a:89:2d:94:a0:53:a6:a1:10:c9:
2c:b6:38:03:8c:0f:ea:cb:5d:b0:ca:ac:73:4f:06:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.40.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ff:22:b9:62:7a:23:01:45:88:7c:ac:09:53:28:b7:6c:2a:
23:bf:e5:0a:fb:0f:48:d7:2a:9f:92:b4:63:e2:92:50:a4:bc:
45:bf:d7:c7:13:5d:2b:1f:25:2f:d5:0c:1a:28:56:2d:3c:b9:
51:a4:97:96:b4:cc:05:1c:35:a1:6d:2c:90:d0:7a:8e:47:3a:
79:55:f8:e1:77:55:89:61:1d:04:21:fb:eb:ca:fc:ed:f8:3d:
8c:18:cc:e5:59:ef:43:49:ab:0e:cd:fa:c6:4b:a4:be:81:86:
e3:5a:c2:97:74:78:2e:56:2c:3a:27:67:bf:89:55:ee:40:b7:
7e:65:5f:d4:af:e6:d2:ea:25:9b:62:e6:30:c0:06:d6:39:40:
49:a0:8e:20:3c:a1:39:1f:2e:4a:ee:15:25:42:7e:17:03:ed:
74:69:81:61:84:1b:dc:00:fa:a8:ce:47:f5:92:b7:bd:af:7c:
cf:63:36:18:91:ee:7c:99:21:89:15:b4:f9:cd:9a:2c:1d:c9:
76:38:c4:84:cb:cb:eb:3f:b9:32:f9:2b:60:41:b9:49:9d:98:
63:21:8b:6e:97:c3:67:23:c2:ca:90:d2:5d:88:e6:22:a6:2e:
37:e9:84:cc:8c:6e:cb:b2:0e:f0:6b:24:35:d8:f9:04:49:8f:
48:c5:fc:82
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGt9EXGmeTrp4Zo7jRD6ShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODEzMWU4ZjlhNDg1MDQwZDlmY2FlNzE2N2E0MjhiOGExMmY0OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFinykna8UG7e7HkI0nCnKq2jGuA
/MVlNeNBxujtoGTzB3zuZhLXHNRYTAvR3iXkiboCg9OaiQLPbPZI6uz7/52Nh21B
r7EbA0oeRD9FvBleA+UCs9zKZ2GWpTol1rI7CwJnWftXG38onREbDKbXj0WFsvhM
NJnGoS0JhIxPwb/psYJd+wsHeJB4GcAANQxAUCVUu00+qFwUKizvHZjb/PZM/NeR
1G7k0cylfiPWLZQIBGXjsY8pi3vASX90fN46vynU87ZT+BI9K7xZkNYepupGgZ2c
4SHnv+ZkgXZYjhkCKmQ26TqJLZSgU6ahEMkstjgDjA/qy12wyqxzTwYMYQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFgTHo+aSFBA2fyucWekKLihL0nqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2Q3NDQy
MC02NDI1LTQyNzItOTNhMi0zNTg2MTY0YTdmNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDc0NDIw
LTY0MjUtNDI3Mi05M2EyLTM1ODYxNjRhN2Y0NC8xL1dCTWVqNXBJVUVEWl9LNXha
NlFvdUtFdlNlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9AoMA0GCSqGSIb3DQEBCwUAA4IBAQAh/yK5
YnojAUWIfKwJUyi3bCojv+UK+w9I1yqfkrRj4pJQpLxFv9fHE10rHyUv1QwaKFYt
PLlRpJeWtMwFHDWhbSyQ0HqORzp5Vfjhd1WJYR0EIfvryvzt+D2MGMzlWe9DSasO
zfrGS6S+gYbjWsKXdHguViw6J2e/iVXuQLd+ZV/Ur+bS6iWbYuYwwAbWOUBJoI4g
PKE5Hy5K7hUlQn4XA+10aYFhhBvcAPqozkf1kre9r3zPYzYYke58mSGJFbT5zZos
Hcl2OMSEy8vrP7ky+StgQblJnZhjIYtul8NnI8LKkNJdiOYipi436YTMjG7Lsg7w
ayQ12PkESY9IxfyC
-----END CERTIFICATE-----
Generated at Fri May 3 01:47:35 2024 by rpki-client on console-ams.rpki-client.org