Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer (raw, json)
Hash identifier: 3V0VDSgizh71HKZzzAgLKehtE6zQPQf0SxAKHD0TmB4=
Subject key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64ACF952343415373A42E56BC46BC10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29152
IP: 195.80.152.0/21
IP: 2a00:1b10::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cf:95:23:43:41:53:73:a4:2e:56:bc:46:bc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:05:ef:03:b6:b3:e8:52:f5:a4:4a:37:f7:
5c:65:8c:ed:2c:2f:46:5a:a3:71:de:f7:52:68:93:
98:95:97:9d:d7:bf:ea:00:e4:65:79:e7:e6:7b:f0:
f0:8d:a6:cd:d3:7f:90:e9:8c:f5:0d:f9:37:b8:8b:
86:95:ad:a8:3e:e1:cd:d3:7d:96:3e:84:bc:e8:18:
3d:3a:32:51:b5:62:fb:57:ee:ae:ca:6d:32:68:c2:
bb:36:3a:7b:e3:f2:28:4d:5f:23:e1:75:be:b9:2f:
19:cb:51:1a:ee:8d:85:e5:6d:50:b6:92:b2:e7:d4:
4f:8a:f1:b7:e7:db:da:8b:11:a5:6a:cb:6e:7f:d6:
7b:2b:9b:6b:07:88:28:22:37:1f:16:16:2a:c3:f6:
89:3c:87:58:da:a4:40:f2:ad:2e:8b:ce:c4:b9:b6:
d3:26:41:07:49:82:0d:de:97:10:05:58:27:c5:d6:
8f:f3:aa:f8:de:a4:39:da:68:e0:46:26:66:22:ce:
ad:81:02:19:94:a6:e2:f2:ac:ff:4e:a3:57:b8:23:
56:92:56:03:0d:10:e5:27:18:ce:50:b2:f3:63:96:
b5:97:12:5e:60:70:e6:6b:c2:4f:d3:e9:3d:49:e3:
82:a0:0c:48:fd:dd:37:27:24:ef:f5:b8:6e:a0:ea:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.152.0/21
IPv6:
2a00:1b10::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29152
Signature Algorithm: sha256WithRSAEncryption
6f:0b:0d:d8:06:3b:be:e0:b5:67:0c:0b:a8:68:f3:5e:80:fd:
6f:f0:db:5e:02:32:76:b3:74:1b:e5:5d:16:11:f5:71:78:ed:
da:a2:ed:2a:39:c1:1f:42:62:7a:7c:5c:fe:ae:46:c5:39:1e:
db:b2:14:11:ca:f1:53:2b:55:46:1e:69:51:88:c8:d8:0c:d8:
77:9b:a5:83:d8:78:56:e8:20:a1:66:df:c5:73:2a:ef:4d:5b:
dd:b5:09:a6:d7:81:b0:91:49:52:13:31:30:f8:9c:ae:8c:c4:
81:dd:74:ba:df:a1:14:96:ca:94:cd:18:0f:11:b1:b1:82:34:
29:28:ad:ac:26:a8:13:88:9f:62:76:d8:53:ad:cd:cf:28:15:
d8:e9:48:56:6e:55:1f:1b:04:3a:f8:1d:45:46:b2:ef:0f:9a:
9a:62:23:d8:8a:39:4d:63:53:47:68:e7:fc:86:db:74:91:39:
1e:e0:37:5e:e6:97:63:92:dc:96:4b:4b:d0:1f:59:64:fe:6f:
82:27:d3:47:ed:8e:76:e1:bb:ac:c8:b3:20:31:49:d9:94:ca:
7a:24:20:00:a8:1c:8c:62:ea:fa:4a:58:a9:76:01:75:20:ec:
27:df:a8:11:85:4e:3c:f7:19:6f:ec:1a:1b:4d:f1:88:df:c8:
98:13:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:21:27 2024 by rpki-client on console-fra.rpki-client.org