Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
File: WLtUmHY5ugxs-8rVmMP145_KlFw.cer (raw, json)
Hash identifier: PD6Cz7PYo4hRm/V0Nr2rWRc2siu5h/+i4yXs8ZyWw6E=
Subject key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218D7CE1FABAC17D464826C53C5800
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59871
IP: 185.68.68.0/22
IP: 2a03:2a60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8d:7c:e1:fa:ba:c1:7d:46:48:26:c5:3c:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:b3:28:11:2f:12:6c:dc:55:39:88:75:62:
16:c1:dc:b6:18:63:ce:25:88:91:85:d5:6b:7d:6b:
8e:ef:17:bf:bc:be:d6:6f:8c:23:f1:50:a9:e5:b1:
51:1f:bd:dd:c8:b4:b2:d4:3a:9d:f6:ee:f0:61:80:
b6:e8:91:10:2e:36:d8:a4:28:3b:10:35:e3:40:c1:
1c:a0:d8:e8:d6:22:2f:6e:6a:b3:72:a9:8c:07:6c:
15:c7:90:b9:e7:9d:e2:cd:96:1e:c5:78:22:44:e5:
54:2e:62:bb:06:7e:26:98:5a:96:25:f9:f1:18:db:
96:d5:b4:c6:54:15:59:ac:76:36:c0:ed:8c:de:2a:
74:96:1f:1c:c8:aa:bf:74:f5:97:34:00:d2:9e:74:
6d:a2:1f:dd:ee:a2:f7:5d:20:69:49:39:af:88:d8:
0f:58:93:c8:63:48:7a:bc:25:f9:e7:e2:56:24:6e:
6a:8d:2f:bc:12:64:fb:e2:45:ba:2b:e5:c5:e5:14:
97:3b:01:05:66:8c:96:fd:05:12:9b:b2:b5:78:4c:
c4:82:82:9a:9f:3d:fc:66:af:fa:14:d1:86:8d:fb:
90:73:9c:cb:28:6f:1c:95:f9:a2:c9:f7:ba:73:0b:
6b:b2:f1:75:10:a4:2e:1e:33:d7:43:e2:80:05:c1:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.68.0/22
IPv6:
2a03:2a60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59871
Signature Algorithm: sha256WithRSAEncryption
55:db:3c:1d:d9:c1:88:1a:7a:b1:d1:3b:92:55:e5:4c:b6:d5:
b6:fb:ef:5e:f8:78:a6:4f:e4:99:99:d6:ca:ad:d1:c4:06:ad:
e4:7c:57:dc:d2:8f:8e:5d:49:51:d9:cd:3a:8b:64:f5:4c:e1:
76:23:dc:02:79:f0:06:63:6e:23:9d:e8:94:f1:26:a5:4c:27:
50:89:3c:d8:a9:8e:80:74:84:93:1f:59:27:ea:11:88:9d:5c:
80:1c:dc:1b:d8:cf:bb:bb:64:02:a6:04:84:d2:84:a1:45:3c:
26:d6:0c:33:77:fe:03:ad:14:b2:fc:da:ca:a3:b6:2e:19:1d:
92:fc:79:2d:ec:5c:06:3e:fa:37:d8:40:3e:a7:21:78:15:c1:
e7:6f:dc:98:4d:9a:ba:24:37:2f:07:58:72:d6:d2:8c:fc:d1:
7f:4b:25:fd:4b:5b:f1:98:29:d3:df:cf:55:4e:3f:dc:f1:32:
e5:73:54:34:b6:be:6e:33:ca:a0:5a:1c:25:28:ef:97:f4:3f:
60:a0:98:4b:b6:5e:28:04:26:e7:ae:81:94:42:55:f3:1d:79:
e4:96:83:53:f0:b9:e7:1e:4d:44:75:0b:42:f3:dd:98:75:90:
99:50:b8:71:a7:65:01:35:e3:95:9d:14:cb:a5:c9:55:82:9f:
ce:13:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:40 2025 by rpki-client