Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer (raw, json)
Hash identifier: jaKjcMurJxKHTBVND4P5PTgu9o+uUFrDfWggd6tiFfY=
Subject key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4C71DFB3F10DE8CB2125239C24E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198792
IP: 5.39.224.0/21
IP: 2a00:fb40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4c:71:df:b3:f1:0d:e8:cb:21:25:23:9c:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:04:f0:cd:ae:c3:e7:be:a2:64:c4:ed:ab:18:
0d:1e:65:c9:01:3c:f2:07:ad:bf:64:4e:02:bc:07:
00:30:1a:49:5f:55:a8:d3:00:98:1d:66:ea:10:75:
41:32:64:ec:df:40:ce:e9:09:76:a9:7e:a0:b5:d1:
0e:87:b5:db:c0:2a:73:29:98:f2:d5:35:54:c3:67:
c4:77:ce:c8:d5:a4:d8:b5:38:76:56:37:29:8f:ee:
55:53:0d:61:2e:c6:65:16:54:c9:70:a6:44:b0:68:
2f:9c:da:29:04:20:bd:f5:ff:7d:6c:be:45:6a:f6:
81:9e:92:ba:f8:73:6f:cb:1f:c4:1c:d0:d8:e2:12:
f6:a2:a3:72:4a:06:a2:c7:32:46:14:66:39:42:d7:
24:e9:11:ca:6a:94:19:72:80:3d:f5:79:2f:be:98:
a8:e7:7b:d0:4f:57:98:2a:7b:22:6b:1a:4e:66:30:
05:e4:a5:26:a6:cb:0a:4e:ee:89:1a:5e:a3:ee:29:
3d:f4:e0:be:5d:cf:71:3f:1d:0f:20:33:0a:81:47:
ed:fe:60:d8:5d:48:7e:0c:f8:e9:ce:92:2a:c6:0c:
f8:4b:f2:5a:83:81:39:26:69:2c:bd:4b:90:f1:cf:
db:d1:22:7c:fc:57:6a:c6:89:e3:08:57:43:13:d2:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.224.0/21
IPv6:
2a00:fb40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198792
Signature Algorithm: sha256WithRSAEncryption
50:07:14:f4:4c:88:0a:3b:7a:97:be:a2:03:37:93:4d:9c:d9:
c6:cb:7e:a4:a8:3f:b6:56:d2:53:d1:c0:d1:8b:cb:8c:1f:f0:
dc:fe:d7:9e:2a:73:4e:43:14:bc:96:17:b4:74:1b:9d:69:fd:
18:03:43:c2:e3:2b:0e:38:04:42:3c:71:bc:7f:95:79:c8:b2:
be:43:cd:7d:08:57:66:62:1b:58:cb:dc:9f:33:0c:de:da:be:
d2:a2:b1:1b:57:3b:33:0e:0a:48:11:59:f4:4e:ad:e1:4a:bf:
8b:fe:72:38:f9:76:da:34:12:ac:62:bf:72:e0:d8:0d:7d:d9:
b9:27:07:98:a8:14:2c:8a:62:64:cd:b8:cc:ce:bd:65:54:9b:
9f:7c:f0:e3:f5:b8:08:e7:c8:b3:42:ad:64:00:11:97:73:0b:
86:77:e3:88:0d:3c:56:5f:e8:02:ed:d8:0f:68:d0:17:4d:b6:
93:5c:21:7b:c3:80:e3:75:a6:2c:ff:21:93:64:aa:04:71:08:
ea:ac:e7:f0:d0:1e:95:40:6e:24:ed:7f:c9:37:17:01:d9:50:
ea:c6:7c:d7:e4:b4:94:42:d3:d5:6c:19:77:2c:06:11:60:99:
78:ed:dc:94:6c:ec:bf:06:5a:33:44:e3:b5:2b:d6:ab:4a:76:
62:fe:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:12:06 2024 by rpki-client on console-fra.rpki-client.org