Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer (raw, json)
Hash identifier: bEAa2kUQt8s0eLxnk34C3V9RAa8ofiMguy0YZN9XPxM=
Subject key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9A01F5AA370C5122D73728126C4ADC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60426
IP: 86.63.0.0/18
IP: 109.234.176.0/21
IP: 185.17.164.0/22
IP: 2a00:8b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:01:f5:aa:37:0c:51:22:d7:37:28:12:6c:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:d6:cf:28:a0:d0:a3:ab:2c:43:33:85:9d:
53:36:3c:04:b4:88:3a:d0:0d:fb:f8:52:7c:9a:46:
5e:fb:0c:a7:dd:d5:5e:d2:1d:6e:13:16:77:86:86:
7d:24:35:f9:39:61:e4:74:49:6e:bd:1c:57:61:94:
d6:b7:f4:4b:73:94:02:06:e9:68:c0:95:9f:a6:82:
50:27:9a:10:db:3c:4e:56:86:37:bd:27:94:53:c8:
e8:88:0e:0f:4a:87:29:fb:3c:a2:06:f3:57:5e:77:
a8:65:61:82:e8:ed:61:89:46:b0:eb:c4:aa:c6:16:
0f:68:39:b2:bf:56:84:34:f6:58:10:1a:6c:51:d5:
bc:26:42:46:12:d3:72:95:1a:d6:6f:d9:8f:6e:50:
ad:d5:73:7b:37:c2:12:dd:a6:7a:08:ef:1f:ee:de:
36:52:bd:79:e1:4e:8a:6a:8d:d9:0b:4c:db:7f:a4:
d1:0b:a8:d0:9b:42:b2:02:1c:b4:23:ad:6d:95:5c:
00:cf:10:23:fa:22:2b:26:f7:cb:ae:6d:14:17:f5:
4a:11:3f:eb:33:c8:21:df:17:1c:8c:a2:47:e0:bb:
30:4d:35:db:35:ae:72:6a:95:51:20:7b:30:8e:3c:
a6:22:86:0e:4a:03:f7:73:3f:8a:38:b8:a4:4f:ff:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.0.0/18
109.234.176.0/21
185.17.164.0/22
IPv6:
2a00:8b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60426
Signature Algorithm: sha256WithRSAEncryption
94:9d:5c:f7:9f:11:6c:13:05:18:c3:8b:f4:08:c0:6e:db:93:
b2:56:78:95:d0:00:4b:3e:51:e5:ff:8c:69:c6:3f:34:53:b6:
ef:56:de:e2:b3:c6:ea:0d:12:45:b9:d1:a0:61:71:84:ee:b2:
78:c3:9a:b6:49:20:54:5f:0d:1a:bf:cc:ca:26:14:dc:70:9a:
0f:3c:e7:bd:d9:8a:28:fc:1e:8e:b6:76:ec:5d:e1:a1:aa:70:
0a:07:74:21:46:25:5b:5c:73:07:75:33:ce:e1:0c:8f:92:a1:
31:71:fa:90:b6:5c:77:1b:b5:79:92:ed:63:21:52:6a:79:bc:
1a:b5:df:8e:17:21:0b:25:29:e6:e3:54:ea:65:ea:f8:1b:4c:
5b:11:99:43:6d:69:87:4c:74:16:32:2a:d4:d1:b4:d7:08:c3:
f4:24:a4:03:2e:d3:5b:95:6d:a7:5f:1c:d1:42:92:88:b0:07:
a3:8c:49:5b:83:dd:25:70:2b:40:3d:93:9c:02:47:9e:27:28:
74:f6:55:58:ca:53:7f:71:7e:51:53:c1:f5:38:bc:62:a0:71:
6f:e9:6e:b4:f6:81:af:a7:d3:32:9e:2b:a7:9b:12:38:18:aa:
02:88:43:a1:88:e2:60:31:22:04:86:41:ea:74:a1:c9:62:89:
68:46:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:03:15 2024 by rpki-client on console-ams.rpki-client.org