Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
File: WOBoeiTWo-QU15jZsvtsUlkcuyM.cer (raw, json)
Hash identifier: yUdTTT8wI9PkQ6tEgj2TJxX/mR7pR2C6GSBgX5WIj7w=
Subject key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87135EBD7E41722D58030A8535DD289
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208149
IP: 185.89.96.0/24
IP: 2a10:1200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:35:eb:d7:e4:17:22:d5:80:30:a8:53:5d:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:92:2b:58:4d:72:3b:49:b6:31:73:49:1e:
24:47:25:f8:5b:45:a5:d1:8c:53:4a:10:18:6a:31:
14:dc:7a:9c:64:e4:a3:0f:93:bc:8b:2e:05:69:85:
ad:b7:4d:b2:69:89:c5:49:6e:01:23:96:23:4e:53:
06:e3:3d:98:f2:8e:b1:3c:6b:f4:31:b2:5c:a7:a8:
30:fa:db:a2:3c:d6:ff:e0:49:62:ab:1d:ec:21:e6:
f6:6e:2b:d9:5f:f0:41:dc:c9:cf:3a:20:2c:45:bd:
96:91:bb:58:77:ab:da:3e:bd:19:2a:28:2d:19:b3:
bd:34:3b:43:ce:ca:32:7a:6e:3b:f0:47:17:41:c7:
50:54:14:f0:40:92:4d:b8:c5:f7:72:9d:0b:12:55:
ab:33:2f:38:4a:8c:3f:d0:19:74:02:54:f9:f6:e1:
32:d0:f7:6e:f0:47:16:4c:b8:fe:dc:20:9f:41:3f:
20:a4:53:f3:ad:42:3e:4a:73:2d:da:7f:65:15:c6:
30:5c:f2:e5:46:6e:f5:e2:dd:fa:97:e1:3f:e1:3f:
90:8c:cc:ea:89:ec:6d:1f:be:d8:19:6a:3e:86:6a:
3a:bb:db:42:33:13:09:ad:bd:73:53:cd:85:a5:3d:
86:47:d4:49:16:aa:46:fe:3d:9a:50:9c:d3:94:ec:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.96.0/24
IPv6:
2a10:1200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208149
Signature Algorithm: sha256WithRSAEncryption
6d:d1:5f:8d:88:48:d0:7a:c4:a3:57:05:7e:b1:78:73:8b:e3:
8c:70:f5:da:f1:51:58:51:2f:27:80:17:b2:20:c0:94:28:ce:
56:99:b4:da:cf:f0:bd:0a:d7:c5:e7:1a:ce:4d:05:e2:b2:c1:
5b:82:d7:0b:07:0f:39:81:10:55:d1:d8:8c:9c:ca:53:62:db:
95:2c:95:21:1c:40:ba:15:7a:d9:bb:ee:9e:e5:d9:3b:2a:10:
cf:82:f1:11:1f:12:a2:d4:dd:ff:84:94:c5:14:9d:3d:41:ca:
99:bd:2b:ed:49:2e:55:e5:fb:5d:b3:da:6b:0f:a8:8e:f7:98:
3d:fb:3c:05:52:86:86:39:a6:15:6b:4d:15:7c:a5:52:cd:6e:
d8:ef:66:84:48:eb:96:0d:9b:bb:37:65:0f:6b:6d:93:9c:c7:
3e:06:b3:b8:64:d2:98:5f:fc:35:6f:74:4a:79:c5:b1:6c:ee:
0a:a6:34:cb:76:6c:be:1b:29:8c:15:0e:87:47:78:6e:5a:44:
ef:f4:4b:5c:d0:fa:c3:3b:fd:75:04:c8:34:df:c1:13:b2:3a:
31:aa:80:30:5e:ac:c5:87:a2:c9:04:34:75:4c:6b:d2:c3:5f:
0a:4d:ae:78:f5:f1:0b:1f:29:4c:da:c9:30:7b:1f:61:1d:bc:
3c:95:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:17:14 2024 by rpki-client on console-ams.rpki-client.org