Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
File: BjyTAb89LhVgz69-3EGnw-yKFqY.cer (raw, json)
Hash identifier: Aezbk3E9LZXGUYSOGLShMcLTIljc3f/UsgNC7UzeMCw=
Subject key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1950988DF12A4817552D712586561
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30828
IP: 193.19.184.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:95:09:88:df:12:a4:81:75:52:d7:12:58:65:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:8b:be:d9:5d:ec:e1:f7:31:8d:95:cd:47:
2a:03:8f:e9:a0:e4:99:f4:45:67:9e:55:17:89:16:
0f:e2:7a:c4:0e:d0:84:d0:d9:7c:f1:58:cd:56:31:
70:bb:d1:af:9d:ad:6c:fd:38:68:1e:18:f5:86:b4:
3b:91:a4:1e:99:c7:77:72:83:5f:ad:d7:3f:c5:d3:
86:b9:4f:9a:85:96:cf:95:38:d2:b0:f5:73:2d:6b:
9a:80:4b:19:3c:82:40:d7:ab:75:00:48:20:69:4a:
0e:cc:99:dd:f2:55:0d:32:e0:63:7f:9e:f7:54:d3:
34:15:bc:99:af:7f:da:9c:31:35:ee:f1:24:7e:63:
31:9c:90:bd:aa:3f:55:1c:65:2c:b3:41:08:ab:d5:
b7:a1:99:ca:4b:62:d4:ec:b4:87:4d:76:9c:64:7b:
b0:ad:05:05:91:6e:13:b5:7f:c0:f2:dd:e4:c7:c3:
e1:35:ab:de:01:9f:02:84:c9:3b:60:38:09:e4:fe:
a6:d3:05:50:05:00:66:2e:0d:a2:55:4c:cc:4d:d2:
2a:fe:c4:f6:4b:5c:0c:2a:d8:89:91:ee:c3:72:df:
66:09:de:f2:20:b8:d7:87:8c:ee:f4:e7:ed:8d:ae:
1b:80:25:9e:38:94:0e:33:1b:12:6f:37:55:c9:91:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.184.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30828
Signature Algorithm: sha256WithRSAEncryption
98:6d:d8:ae:c0:d8:8b:54:e2:5f:c1:1e:f2:8d:ee:7b:c7:0d:
eb:de:ea:9f:e0:34:8f:25:b4:9a:90:d7:cd:2a:ff:79:69:65:
c1:7d:65:b7:68:34:9f:47:2a:30:9e:d9:77:e3:95:04:72:16:
48:2c:e1:bd:52:16:fa:49:a9:64:7e:23:86:3a:bf:c3:0d:2c:
30:ca:bd:3e:7c:a8:da:f9:48:99:5c:88:88:57:ed:d7:0d:fe:
d7:b7:1c:d5:80:fa:6a:7f:97:9a:f1:62:e3:9a:65:6c:a0:1a:
e3:3c:97:bd:6a:71:9b:4a:fb:4a:0d:cc:17:04:2a:9d:4e:19:
d4:87:d1:5c:76:ee:8b:38:04:51:83:9b:9b:6f:25:73:01:fc:
89:d2:0b:46:5f:61:0d:49:fb:88:21:44:7f:92:44:6b:ee:b9:
87:d6:c6:62:91:72:e3:93:31:d6:2e:51:ca:80:dd:55:4d:c6:
e4:2a:31:03:bb:07:c5:3c:75:7e:c5:cd:55:15:f9:62:05:81:
2b:ef:da:8e:70:56:73:a9:85:8b:f4:99:f1:3c:b0:60:83:e2:
c4:21:13:06:9d:fb:e1:06:4a:4d:4e:c9:ec:26:32:89:42:44:
1a:14:e0:74:0f:18:f8:0d:1d:ac:2e:57:a9:67:cd:ea:16:7f:
bd:1f:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:23:58 2025 by rpki-client