Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer (raw, json)
Hash identifier: +x3FfdY2ZhFVq62EeSq5P4lOQ707QB4G9BQ5No+HLP4=
Subject key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E17DB52C5EAD9E71873619297B112
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200770
IP: 185.96.212.0/22
IP: 2a06:200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:17:db:52:c5:ea:d9:e7:18:73:61:92:97:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:d3:ba:fc:77:e1:02:1e:7e:ad:bb:58:fd:
3c:df:3b:9c:bf:d2:87:ac:0a:48:d2:3e:c5:00:29:
87:d9:3c:7a:bc:af:f7:64:e3:7e:c4:cf:75:a0:27:
fb:ba:4c:bf:85:b4:05:1e:b7:03:c3:c0:13:9f:71:
2b:17:8b:8a:92:9f:14:65:12:53:6c:8e:6d:14:15:
b3:97:5d:0a:e0:9b:f4:d6:4d:11:b6:32:ec:53:c3:
fa:50:37:36:74:59:9a:ec:5b:15:40:b1:a7:f4:3b:
10:12:2e:84:77:5f:b9:9a:c3:05:6f:63:14:1c:54:
85:27:6f:43:d3:d5:d5:2c:e7:38:bf:fc:b3:0e:35:
0b:7b:27:98:73:ce:71:e3:52:87:7f:71:f5:1c:3b:
de:76:b6:4a:67:71:52:33:91:ac:cc:9f:8b:2d:83:
ff:99:6d:4a:75:15:55:16:89:d2:a9:3f:9b:19:a8:
e7:38:2c:36:80:48:23:94:19:5d:dd:93:9b:f4:99:
c5:57:98:f0:84:e4:44:a8:20:39:ff:a8:78:6f:fb:
3a:bc:3a:d9:23:62:a1:6f:b4:70:12:2c:95:50:a4:
4c:15:f0:54:c2:47:2a:d1:97:3d:1e:eb:17:ad:49:
69:a9:2d:28:1d:95:f8:5b:8e:5c:2c:9b:0a:24:b4:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.212.0/22
IPv6:
2a06:200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200770
Signature Algorithm: sha256WithRSAEncryption
6d:33:88:2e:32:e3:9a:a4:31:05:ae:2d:3e:df:cf:1f:ce:42:
f5:27:60:45:bc:48:71:a0:18:a6:09:32:89:1d:12:3c:ec:3a:
01:3b:d0:09:bc:41:76:9e:fb:13:e6:b1:23:38:61:16:ca:ff:
df:2a:36:60:02:5c:69:56:2b:0c:d8:09:00:9e:64:80:f7:8b:
0f:70:d5:4a:ff:93:ed:d0:f6:c1:69:7f:d4:50:bc:1a:c2:dc:
92:16:97:46:c1:dc:0b:92:14:d2:f2:7b:a6:e7:62:19:e3:cd:
00:30:c4:64:be:7b:d2:b2:21:73:8f:6b:6e:7d:c9:7e:ee:fa:
93:8f:24:82:00:85:3c:ae:32:0d:83:71:8a:17:9f:15:fc:f1:
13:db:2c:97:c4:c5:75:14:ea:31:b9:84:9f:59:d3:a9:6e:34:
b6:f7:eb:fa:b9:0b:6f:66:67:52:2c:72:f5:6c:c3:8a:30:bb:
23:b2:64:3b:6e:7a:d5:65:f7:7a:e2:27:47:bc:d2:51:86:42:
13:81:05:39:23:f5:32:b9:35:10:22:35:2d:57:1e:3b:e0:71:
23:a0:c5:36:07:8b:f6:f6:e1:a8:2e:5c:9c:44:ca:c9:33:3a:
31:d0:ed:6d:7b:a1:15:09:6e:f7:5e:00:a1:72:c5:b5:15:67:
60:86:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:12:02 2024 by rpki-client on console-fra.rpki-client.org