Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
File: WL58UZyUIEI80vkGQL1RyYtKFTY.cer (raw, json)
Hash identifier: 5YYsfpQsrp4E5T3TwGVr6+FOPqgTNgwKnBFJ8djBB/4=
Subject key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70707FB1A83FA75073828F2174636
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13242
IP: 2001:678:d80::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:07:07:fb:1a:83:fa:75:07:38:28:f2:17:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:8d:db:d2:e8:f0:0e:80:d3:11:be:e1:a9:
31:28:53:bf:34:c7:b1:fe:3d:70:41:3e:92:a1:58:
6d:80:9e:8e:bf:b4:a8:61:6f:53:2d:ad:8b:86:87:
eb:e4:a9:18:98:b4:f5:54:0f:9e:9c:5a:d7:69:41:
51:04:37:46:1e:ce:64:83:db:dd:cb:a2:2e:f2:01:
d2:2a:b7:ef:6c:80:40:76:64:fd:4b:89:01:25:d7:
85:43:e0:b8:95:35:c0:49:17:34:79:1f:6f:20:4f:
c0:bf:0e:1a:37:83:e1:3b:f6:cc:a0:43:a6:32:e8:
c7:5a:56:a0:a0:3f:08:e6:44:f2:fa:b9:f3:06:9e:
d8:8a:11:e8:c8:17:bf:5b:75:cc:43:05:49:f9:d4:
b0:88:0e:14:e4:95:68:85:1b:78:e1:f9:8e:f3:d9:
72:ab:a3:c2:cb:ab:5b:76:d6:c3:22:06:c4:b0:e5:
f1:03:10:62:91:22:e1:ca:e2:f1:bc:86:42:f6:92:
29:65:97:d1:8f:ab:7b:e2:30:92:b3:ae:52:d5:6b:
8b:df:77:ec:38:2a:a5:f9:91:a5:84:83:49:25:10:
da:04:07:73:14:8d:82:6f:7b:25:cc:90:5e:0b:38:
fc:3e:de:85:c7:7c:8f:7c:80:3e:66:66:4b:cb:88:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d80::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13242
Signature Algorithm: sha256WithRSAEncryption
87:f0:a8:d5:4d:99:59:57:fa:26:52:e8:db:f1:52:b2:e3:98:
91:3b:d4:31:a2:94:c4:03:c5:50:cb:12:90:a4:03:e1:c8:41:
bd:0e:8d:33:88:34:8e:14:6e:12:76:89:a4:67:50:2e:35:63:
ca:44:73:15:27:fa:b4:14:f8:ef:2f:62:f8:eb:74:d3:96:8a:
90:80:5a:77:b1:ed:3b:c4:01:7a:7f:16:21:8a:43:b2:be:c2:
22:eb:80:e0:fa:85:a6:15:f8:4b:3d:31:5f:12:68:c6:50:ba:
94:bb:32:96:bc:93:ed:13:37:11:c0:4b:8b:91:7d:af:db:4a:
ef:b8:46:a0:e6:6c:3c:c9:29:2e:00:b7:d4:05:88:b8:29:f2:
72:4d:bb:f8:8b:c9:af:06:da:7d:72:e4:db:f0:81:40:b8:30:
9f:83:28:44:52:ef:b7:d3:1b:62:21:5f:a3:b7:70:30:a4:0a:
15:55:79:6e:5e:05:79:4f:c3:c6:1e:f3:84:f8:a1:f6:99:59:
8d:86:a5:9f:bc:a5:67:18:4a:36:2e:ce:6c:ba:a4:7d:d6:2f:
93:00:a7:bf:06:25:79:3c:f5:87:52:0c:a4:b0:38:0b:e6:41:
92:3e:ad:8b:fa:d1:58:04:68:23:44:4c:11:c3:f6:8c:26:e4:
0d:f6:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:39 2024 by rpki-client on console-ams.rpki-client.org