Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer (raw, json)
Hash identifier: mNAe9N7GgLtJ+zDudI7NnY9LrxO8DtDmiu2WwWJubjI=
Subject key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801213C265D2554EBC9D7BF53947DA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200475
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:21:3c:26:5d:25:54:eb:c9:d7:bf:53:94:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:c2:19:13:81:e3:67:4b:ae:de:53:57:0b:
9c:e0:49:1b:a5:3b:30:9b:fc:59:7f:63:c2:90:d2:
a1:d4:7e:94:f3:d4:9e:73:96:60:40:ba:4f:65:cf:
22:4d:42:66:48:97:1d:a9:ec:d0:28:37:44:2e:04:
37:c7:d8:2e:ab:54:67:88:cd:cb:fc:d5:c6:7c:94:
68:3d:5b:95:51:1e:a0:62:34:b3:43:42:1d:49:2a:
0f:e2:bb:5b:a2:30:b5:ec:db:0f:36:c8:d3:72:d6:
bb:68:60:d2:87:34:7d:37:f4:90:6a:0e:94:1d:0d:
0b:63:52:99:a6:41:9e:25:58:55:e8:66:ec:c8:ff:
42:51:fd:1c:a2:05:d9:76:a7:b6:b6:df:3f:d9:74:
d1:39:4f:23:d4:c6:eb:34:15:08:09:ed:b3:93:47:
01:1e:65:b6:8b:7f:4e:d9:fd:01:88:a5:db:1a:79:
92:6d:6f:35:6c:20:a9:24:b9:db:d1:4c:1f:ad:0a:
88:2b:de:e0:bc:8a:18:53:62:f5:3c:bf:5b:26:66:
ee:f4:ce:ff:3a:cb:23:0d:29:25:2d:6a:2a:1e:49:
8f:cb:cd:77:44:f0:cc:0f:ec:c0:94:69:7e:c2:95:
69:01:a4:be:66:4b:68:fb:85:95:8e:20:bf:75:46:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200475
Signature Algorithm: sha256WithRSAEncryption
71:f6:54:23:37:81:8b:00:ad:5d:5e:94:1a:11:61:8b:eb:63:
84:88:04:ce:c0:65:df:e0:c6:1f:bd:ac:47:51:32:55:08:f9:
a7:9e:65:57:d3:23:77:d9:57:a8:83:67:be:a5:11:59:11:e6:
cf:c5:d7:5a:1d:c1:1a:f0:a4:cc:99:4d:e4:7b:3c:93:c7:d2:
15:53:c1:f8:b0:d3:04:f4:82:6e:54:1b:92:73:f2:90:7c:e7:
80:94:b8:98:e2:97:8b:23:df:9f:b8:15:9f:7a:b9:ef:c0:ac:
3d:30:7f:7f:23:33:56:81:9b:a4:8d:f1:f1:f2:d9:20:47:d6:
bd:c2:32:a5:b7:c9:41:94:7a:18:39:80:68:a1:f3:5e:25:44:
e0:65:ab:30:7e:59:d6:c4:a8:c8:ce:20:1a:8a:d9:d1:ce:f8:
c4:c2:e7:47:b2:94:61:d3:c0:5a:ae:e0:62:65:48:a1:37:10:
70:3d:99:f1:db:52:83:59:29:ba:42:4a:ec:cc:eb:d2:7c:45:
0c:e8:43:c9:e5:7c:ff:66:bb:f8:0a:a2:aa:84:0d:2b:cd:09:
07:52:2c:46:fd:16:84:f6:d1:30:cc:ec:fb:d4:22:12:f9:71:
35:38:83:d4:29:16:ea:65:a8:df:fd:bb:ef:b1:27:b9:ce:ce:
68:9d:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:29 2024 by rpki-client on console-ams.rpki-client.org