Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer (raw, json)
Hash identifier: DS9Nh/zD2OdAE3/lE4TdbMrNO/Q10+dvrVPRqCvzv5o=
Subject key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914ABA50B4945F76BE527C89A1AEB2D4E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Aug 2024 07:53:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29152
IP: 2a00:1b10::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:ba:50:b4:94:5f:76:be:52:7c:89:a1:ae:b2:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 07:53:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:05:ef:03:b6:b3:e8:52:f5:a4:4a:37:f7:
5c:65:8c:ed:2c:2f:46:5a:a3:71:de:f7:52:68:93:
98:95:97:9d:d7:bf:ea:00:e4:65:79:e7:e6:7b:f0:
f0:8d:a6:cd:d3:7f:90:e9:8c:f5:0d:f9:37:b8:8b:
86:95:ad:a8:3e:e1:cd:d3:7d:96:3e:84:bc:e8:18:
3d:3a:32:51:b5:62:fb:57:ee:ae:ca:6d:32:68:c2:
bb:36:3a:7b:e3:f2:28:4d:5f:23:e1:75:be:b9:2f:
19:cb:51:1a:ee:8d:85:e5:6d:50:b6:92:b2:e7:d4:
4f:8a:f1:b7:e7:db:da:8b:11:a5:6a:cb:6e:7f:d6:
7b:2b:9b:6b:07:88:28:22:37:1f:16:16:2a:c3:f6:
89:3c:87:58:da:a4:40:f2:ad:2e:8b:ce:c4:b9:b6:
d3:26:41:07:49:82:0d:de:97:10:05:58:27:c5:d6:
8f:f3:aa:f8:de:a4:39:da:68:e0:46:26:66:22:ce:
ad:81:02:19:94:a6:e2:f2:ac:ff:4e:a3:57:b8:23:
56:92:56:03:0d:10:e5:27:18:ce:50:b2:f3:63:96:
b5:97:12:5e:60:70:e6:6b:c2:4f:d3:e9:3d:49:e3:
82:a0:0c:48:fd:dd:37:27:24:ef:f5:b8:6e:a0:ea:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1b10::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29152
Signature Algorithm: sha256WithRSAEncryption
1c:5e:74:28:f9:f3:39:40:4f:70:6d:1c:a7:3c:9a:49:6a:d8:
fd:6b:49:bd:bc:d8:2d:3c:6b:6e:62:3f:ba:c5:a0:2c:58:32:
dc:33:6c:4f:27:b8:fb:0c:b2:40:84:30:d3:84:b4:7b:62:e6:
25:88:18:17:57:bf:1e:de:5e:28:23:73:6b:03:94:15:7e:d3:
cf:ab:28:13:1a:2a:6c:d3:63:1c:f9:a5:63:ff:49:55:65:b3:
1e:1e:0a:9f:5a:d8:93:a1:60:d0:17:45:0d:6d:1b:d0:90:3b:
07:6b:0e:97:47:59:be:2a:32:c5:6b:ab:35:c5:bd:5d:e9:0a:
20:eb:06:60:88:7c:b4:93:45:97:be:74:dc:10:4f:54:b4:c6:
b1:eb:af:54:ca:2e:70:a4:cc:f0:af:7a:1e:1a:4d:1f:af:80:
27:b0:43:f2:ac:56:bc:ac:ff:a8:52:35:fd:0b:ca:6f:f0:ce:
f7:e3:7a:07:81:5c:13:2a:e5:88:ee:ea:4e:8c:8c:cc:33:44:
b2:7c:11:f9:f7:67:0b:81:a8:42:b5:05:ab:01:29:12:4b:e0:
dd:54:31:9a:f8:b7:38:0f:40:72:b8:e8:f7:8b:14:8e:f6:67:
76:0d:23:46:c1:6c:ee:43:f8:de:7e:43:13:f3:64:d8:6d:c8:
73:64:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:41:35 2024 by rpki-client on console-ams.rpki-client.org