Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
File: WSgL6bNNnGabgCDlTdakheMX1y8.cer (raw, json)
Hash identifier: 2Av1jpWU1HuE3j+zYxrFr0CKVweJmApqwhNgZnaCd/w=
Subject key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948990EB81351823C4385689F7D3B474E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jan 2025 15:52:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214342
IP: 193.200.28.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:90:eb:81:35:18:23:c4:38:56:89:f7:d3:b4:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 21 15:52:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:05:81:fc:7d:d7:1b:79:9e:65:57:6f:3c:
9b:b1:97:21:9b:7f:72:d4:89:40:d9:6b:fc:23:b3:
e2:97:b8:c3:2e:7e:b8:5c:79:7c:5c:a3:3b:a4:5b:
48:50:e1:7e:74:5a:94:eb:a8:63:6e:f4:19:ae:8e:
e4:52:c3:6d:e4:cd:8c:60:b2:1e:97:dc:b5:42:f0:
0c:11:0c:86:41:32:19:be:d2:d6:ab:fc:64:94:8d:
d6:05:d4:f0:3f:82:41:9f:e0:06:a1:f1:0d:bb:91:
63:15:7f:38:a6:f7:de:60:ee:73:cb:dd:28:e2:2a:
fe:f6:57:15:cd:7d:20:00:2e:e6:71:0e:c0:01:72:
0c:64:27:47:98:26:37:37:2b:cc:f8:e7:ea:95:0f:
52:c4:83:b9:0a:29:b8:9a:ef:c7:5b:fd:5e:9e:41:
f5:9a:15:75:09:29:0d:e0:22:b8:d5:12:83:dc:ea:
aa:3d:99:72:96:e5:b3:47:8f:1d:6c:33:49:fd:03:
13:7d:2e:2d:22:52:76:cc:30:d0:2e:3b:4e:95:25:
5c:fe:49:02:13:b6:4f:54:36:f7:52:09:16:ba:b8:
db:34:fd:3e:40:dc:e8:55:db:c4:8b:bd:56:1a:ab:
8e:06:5e:56:11:6e:fe:de:7e:c6:fb:72:30:d6:b5:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.28.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214342
Signature Algorithm: sha256WithRSAEncryption
9d:e1:3d:bb:2e:65:f2:1a:3e:03:32:5b:2e:10:4b:c9:9f:73:
43:a2:ce:fb:51:32:f2:58:b9:a2:34:1c:53:1a:49:8e:b6:7f:
7f:85:d6:cd:8e:88:c8:16:d5:a5:ac:56:00:a3:80:d5:9b:b7:
41:9b:3d:e9:e7:d2:46:5e:d4:a7:b1:bc:b2:f9:1b:06:6a:e2:
c2:82:81:75:ef:59:c7:57:f5:c9:11:ca:b8:71:3d:32:eb:92:
3f:7b:e4:95:a0:55:76:47:48:45:25:7e:54:f5:1c:11:38:69:
bb:03:87:b4:74:2a:4c:9d:48:e7:dc:63:94:ba:fb:a2:06:e5:
7e:56:6a:82:85:c9:31:ba:81:c7:fe:64:72:8d:41:05:c3:75:
ca:79:b9:7c:c8:1d:d8:83:84:bf:5f:44:39:a6:ca:e2:fe:89:
1e:6a:70:51:1d:b6:1a:54:88:c6:f0:10:16:76:70:af:e7:7a:
87:88:a1:6d:c1:c7:ec:58:0d:64:8b:b1:fc:51:19:3c:2f:a8:
38:9c:63:6d:58:11:64:b0:2a:1e:d2:dc:b4:6f:55:1e:05:5b:
f3:cd:50:58:1d:e5:05:c1:97:b8:85:d9:23:e6:70:a0:f3:04:
c3:d3:a7:40:52:e2:84:9c:95:14:e9:c3:34:b2:45:9b:27:63:
49:9a:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:01 2025 by rpki-client