Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBTLOIX9M21BTnDc4-0ZDXkkMmM.cer
File: WBTLOIX9M21BTnDc4-0ZDXkkMmM.cer (raw, json)
Hash identifier: n9A42DJSMvqt79Jm/PdeoPzmNU9NK+KFytBBhuYFxtY=
Subject key identifier: 58:14:CB:38:85:FD:33:6D:41:4E:70:DC:E3:ED:19:0D:79:24:32:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191790092E1EA5D1833942972350E3A1808
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Aug 2024 07:32:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35263
IP: 86.109.64.0/19
IP: 2a00:1b90::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:00:92:e1:ea:5d:18:33:94:29:72:35:0e:3a:18:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 07:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5814cb3885fd336d414e70dce3ed190d79243263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:ee:c8:ea:28:fc:db:51:ed:01:f1:00:0e:
15:7c:e6:6b:a6:cc:2e:62:16:0f:0c:60:eb:ba:fd:
99:4e:40:3d:f8:f3:c8:85:d1:d8:05:e3:a6:f1:cd:
3f:c2:7a:7b:f8:6e:e2:fb:78:bd:a0:1d:3f:93:63:
ea:b4:e3:da:d7:33:5e:c0:ab:f9:f2:54:06:05:78:
8e:1e:f6:c8:b7:b1:fa:51:97:e6:f4:a6:b3:d4:f5:
1a:65:0d:b6:01:cb:29:00:43:11:ed:51:8e:23:f0:
99:3d:10:b8:39:77:c2:e4:9c:39:69:38:4d:79:3a:
d5:d7:1c:9b:d1:fd:a5:34:5e:d4:bd:8b:75:ff:59:
68:6a:2c:fe:50:7d:f7:ba:7a:aa:60:4c:13:72:de:
a9:09:a1:ab:fe:9f:20:e9:ca:18:31:a1:de:10:5b:
9e:d1:c9:2a:16:7c:bb:94:c7:91:28:1f:51:3c:e2:
6c:19:f0:fd:dd:31:81:bc:c1:4a:2e:c0:b8:87:cb:
53:72:ca:a6:ac:8f:ce:ba:4a:14:93:f2:89:ef:c1:
fc:42:ff:f0:c5:40:e6:be:4e:fa:c0:cf:1b:90:e6:
d0:4a:ae:b7:a4:21:2d:40:15:df:4a:51:2f:0c:b7:
59:ba:0a:af:de:2b:85:f8:1d:ee:07:4e:25:8c:25:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:CB:38:85:FD:33:6D:41:4E:70:DC:E3:ED:19:0D:79:24:32:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/04946b-22fe-4a33-b6ac-d05f0ff4c243/1/WBTLOIX9M21BTnDc4-0ZDXkkMmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.64.0/19
IPv6:
2a00:1b90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35263
Signature Algorithm: sha256WithRSAEncryption
5e:f2:55:4d:33:34:1a:21:76:bf:54:02:b7:f2:fd:21:fb:c7:
22:bb:14:67:1d:7b:22:46:ba:47:3e:16:e5:80:f0:80:c6:78:
b6:07:0b:d9:e3:e5:88:2d:6c:a4:ff:09:08:44:b7:73:b5:23:
4a:4a:d6:b9:56:4f:19:1c:dc:26:a6:ad:1c:d4:01:bb:df:bd:
ed:ed:62:56:af:9f:58:ef:4e:2a:e5:ec:77:98:53:3b:d7:ea:
97:0d:89:fa:bb:c6:1f:f0:92:56:09:55:e8:52:65:b0:08:09:
c2:a2:ca:7b:b9:ee:e2:cc:cd:2a:4e:79:bd:81:80:12:43:c1:
d1:c1:41:5f:6e:25:07:7a:90:94:70:7c:15:2a:c7:8d:36:5d:
a7:90:11:54:8a:fb:1d:39:2a:8b:8b:34:a6:55:c5:50:4a:14:
06:0b:30:99:48:16:0c:36:39:49:a2:fc:a9:3a:aa:f6:06:ee:
26:7a:be:ea:6e:89:7e:ba:52:15:68:7c:f2:2f:70:28:aa:85:
04:2b:b8:d8:1d:30:fc:a6:fc:5d:15:18:ce:64:f4:99:9c:4d:
5f:30:a6:8c:04:76:f2:97:7e:aa:7a:db:c9:16:7d:6a:e7:41:
0a:19:1a:ea:2b:4b:e1:3a:22:5f:94:03:a3:05:7a:88:92:89:
7b:4a:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:05 2024 by rpki-client on console-fra.rpki-client.org