Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
File: wb_RnDPps9MzU8_rZBee9z0yMys.cer (raw, json)
Hash identifier: qMncTfOpGY8qwJhAHlNe/vr6z3viOlZC1sNxZSCGdwE=
Subject key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B22A641E6A629B4E6993BDE3751DE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15923
IP: 193.41.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:64:1e:6a:62:9b:4e:69:93:bd:e3:75:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:13:ab:a8:02:79:45:a4:08:9d:22:ee:5d:
82:e9:11:1a:69:72:8f:ed:d8:fb:9a:02:31:20:b3:
f3:ad:d6:81:31:a6:79:a6:a2:0e:c2:a9:94:41:97:
5a:8d:0b:58:6b:5f:b4:80:e2:90:fe:0c:d0:5f:60:
79:a0:b4:1c:d9:bd:72:70:52:b0:99:f5:1c:33:26:
e7:5a:7b:77:01:18:dc:52:2c:8f:02:1f:dd:66:76:
e2:ed:c3:c1:5b:65:34:20:f8:75:28:cb:a8:12:83:
8e:5d:c1:26:3e:39:8f:7a:fe:2a:43:22:20:cd:11:
c8:22:b1:1f:7f:d8:fd:32:3b:32:5a:24:10:33:ae:
a2:2a:54:fa:3f:85:e3:e7:90:26:72:c9:54:d5:e2:
5b:58:12:7c:9b:96:1c:7a:a1:48:fc:c6:0e:74:33:
9c:f2:13:41:2a:57:06:2e:43:a6:eb:fe:ce:4f:34:
81:87:97:4f:a3:e7:e0:dd:be:6f:d0:20:5e:fa:41:
f7:54:25:a0:68:0b:8e:41:40:a3:82:87:04:1a:86:
84:83:03:fa:67:17:9e:56:da:4a:60:98:12:01:7a:
de:40:41:04:15:37:8c:35:9f:53:96:03:3c:d3:d4:
3a:3b:58:6e:ac:3b:ed:f9:55:51:08:2c:fc:b0:eb:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.6.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15923
Signature Algorithm: sha256WithRSAEncryption
a4:85:64:0b:f9:15:d3:92:57:fc:f0:71:17:6f:20:95:91:66:
78:7a:9e:17:6a:9c:69:b3:3d:ac:53:52:7b:fc:9a:0f:ee:23:
53:b7:b5:99:1e:46:c5:ae:0e:11:85:ea:f5:a2:24:bf:45:d0:
61:16:8d:a0:c6:4c:29:34:bd:f9:4f:4a:fc:2a:bc:ba:99:1c:
a8:35:25:29:79:bf:45:2a:c9:3a:51:ea:d1:fb:88:73:15:13:
dc:99:10:07:27:b2:22:4d:37:1c:31:72:1e:fc:79:bf:23:5e:
d3:27:89:bd:3e:36:ec:bc:20:53:70:4e:5e:fe:00:78:9c:be:
70:ad:ab:9d:eb:ba:3c:66:f4:aa:75:2a:8b:c1:6e:0b:42:f4:
f1:2f:89:f3:29:11:74:be:d8:8b:f8:03:06:25:5d:be:59:bb:
d7:98:a5:77:70:cf:b3:56:57:d6:f4:ab:41:5a:d3:c0:03:17:
ae:ce:80:9c:e3:f7:87:11:ff:ea:f7:7e:9f:4a:5f:5e:f9:7d:
53:08:c6:08:1a:04:a5:40:60:50:ad:4e:01:85:7a:ee:6a:f9:
0d:01:25:b0:8d:2b:dd:a8:4c:7c:6e:be:2b:dd:da:2d:89:c4:
7e:c2:15:0f:de:54:eb:d7:c7:ae:fc:d1:f3:ee:89:f6:40:b3:
d9:2b:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:37 2025 by rpki-client