Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer (raw, json)
Hash identifier: IXY+b9BwboXI9+rhoE5sT9+6RIpXBX49tlFCuRMXYFk=
Subject key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214380712DA0681B54CCF13F4920E413
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215200
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:80:71:2d:a0:68:1b:54:cc:f1:3f:49:20:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8a:57:b2:f8:3a:75:8d:02:d6:4d:b7:b4:e2:
c3:f9:90:72:3c:23:78:4a:c0:a9:39:31:3c:b5:33:
83:81:fb:81:96:6a:d9:eb:94:7e:04:77:70:d8:cb:
fc:af:a6:4e:29:2f:4f:a1:6e:22:4b:77:d1:c9:0d:
ed:32:84:28:00:f0:10:05:71:c8:07:a0:12:a1:b9:
06:30:c3:c3:bc:16:cd:d4:ba:92:06:f1:84:4c:ba:
62:e5:2d:de:de:7c:c4:3c:ce:c6:37:42:ea:b2:69:
33:65:25:bb:88:f3:fe:20:58:a6:a6:4f:5e:70:77:
25:29:26:05:9f:fb:7c:80:cd:67:92:2e:93:3d:ea:
9c:d5:5d:9b:c7:bf:0b:4a:91:c4:53:2d:81:29:73:
6e:be:d1:9b:a9:0c:5e:fc:cc:bc:8c:38:f2:2c:96:
39:4d:c8:a2:ba:63:4f:1c:25:01:7e:cf:57:0b:41:
1c:d4:c6:c0:90:58:b4:ba:d2:fe:6c:e1:68:8c:a3:
4c:2e:74:54:a0:eb:ee:eb:34:cd:b0:c9:90:35:08:
88:c1:22:d6:b7:f6:51:4e:de:91:7f:16:b1:4e:40:
5f:51:ef:ac:6f:cb:f6:35:21:4a:53:7f:e6:6c:e4:
bd:df:5d:ce:5d:02:39:20:59:72:77:c1:11:fe:1c:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215200
Signature Algorithm: sha256WithRSAEncryption
01:e8:9a:f4:5e:e8:fd:b6:8c:a1:92:b8:be:10:46:21:34:d8:
e4:9b:a5:54:ec:66:49:4f:ca:21:1b:b7:46:ca:21:5d:3e:5d:
20:9d:8e:d3:00:a3:3a:d5:25:e1:c1:55:79:e8:18:ad:5d:d7:
96:0f:d5:4a:c4:3c:5e:a2:01:40:b3:51:69:61:8c:a7:37:fd:
d0:16:55:07:e2:bb:cd:71:f2:28:d3:9e:03:e8:96:83:08:b0:
50:cb:61:b3:59:a7:9f:69:68:eb:07:dd:f4:c6:81:44:47:98:
3c:3c:b9:3f:b8:1f:a8:c0:50:aa:94:11:20:a7:6c:f9:73:39:
8b:ee:66:29:fc:7f:56:fe:fb:d4:ea:7b:c6:21:a0:cc:e7:45:
09:93:c3:8f:5d:aa:71:d6:3c:ab:fe:eb:30:e4:b1:ae:8a:d5:
e0:03:fa:3a:76:55:13:a8:9b:f2:87:aa:8f:5e:96:71:59:76:
22:39:81:5c:60:eb:03:10:d1:ee:6b:59:b2:e2:92:57:46:00:
e0:ac:77:45:7a:07:b9:73:19:d8:a9:26:12:7e:af:72:58:7f:
47:b5:5d:74:b6:0d:da:36:a7:dc:92:14:29:29:d0:d8:da:80:
5a:6d:c4:78:f9:48:12:5b:06:0c:9a:99:b2:cb:65:f7:69:7b:
30:14:57:c1
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQhQ4BxLaBoG1TM8T9JIOQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODIwNDNjMDFkN2FkZWFkZDk2ZjU2YmRiYmVmMjc0OGUwMDgwMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YpXsvg6dY0C1k23tOLD+ZByPCN4
SsCpOTE8tTODgfuBlmrZ65R+BHdw2Mv8r6ZOKS9PoW4iS3fRyQ3tMoQoAPAQBXHI
B6ASobkGMMPDvBbN1LqSBvGETLpi5S3e3nzEPM7GN0LqsmkzZSW7iPP+IFimpk9e
cHclKSYFn/t8gM1nki6TPeqc1V2bx78LSpHEUy2BKXNuvtGbqQxe/My8jDjyLJY5
TciiumNPHCUBfs9XC0Ec1MbAkFi0utL+bOFojKNMLnRUoOvu6zTNsMmQNQiIwSLW
t/ZRTt6RfxaxTkBfUe+sb8v2NSFKU3/mbOS9313OXQI5IFlyd8ER/hyXUQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFggQ8Adet6t2W9WvbvvJ0jgCAI0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2E3NDRj
NC01YzI0LTQ4YzItYWIwNi02MDczNjg1OWMwYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvYTc0NGM0
LTVjMjQtNDhjMi1hYjA2LTYwNzM2ODU5YzBjNC8xL1dDQkR3QjE2M3EzWmIxYTl1
LThuU09BSUFqUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNIoDANBgkqhkiG9w0BAQsFAAOCAQEAAeia9F7o/baM
oZK4vhBGITTY5JulVOxmSU/KIRu3RsohXT5dIJ2O0wCjOtUl4cFVeegYrV3Xlg/V
SsQ8XqIBQLNRaWGMpzf90BZVB+K7zXHyKNOeA+iWgwiwUMths1mnn2lo6wfd9MaB
REeYPDy5P7gfqMBQqpQRIKds+XM5i+5mKfx/Vv771Op7xiGgzOdFCZPDj12qcdY8
q/7rMOSxrorV4AP6OnZVE6ib8oeqj16WcVl2IjmBXGDrAxDR7mtZsuKSV0YA4Kx3
RXoHuXMZ2KkmEn6vclh/R7VddLYN2jan3JIUKSnQ2NqAWm3EePlIElsGDJqZsstl
92l7MBRXwQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:32 2025 by rpki-client