Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
File: B1u0EyX9YF4guvwvBllFQ57AX-A.cer (raw, json)
Hash identifier: LguTDfbzsHlawAMVF82Y+SQto4WbDfD7k5L3l35M6oA=
Subject key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001B1B8FCE43C2DED14357AA27D37C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.46.63.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1b:1b:8f:ce:43:c2:de:d1:43:57:aa:27:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:ba:32:c3:d9:1e:8d:dd:c0:9c:bb:83:02:
e4:b2:14:60:dd:de:c1:ac:b6:13:44:5a:c0:a1:f2:
ce:70:a1:4d:f2:e8:27:1f:30:2e:01:10:d2:00:71:
57:ab:f0:9c:73:9a:78:71:33:1b:87:7c:c3:f2:28:
22:11:30:69:53:23:1c:b1:9e:fc:83:69:47:ce:f1:
81:85:2b:29:94:56:2c:f1:56:23:1d:df:b0:a4:db:
50:00:f2:81:66:d3:7f:ed:30:05:09:e8:ca:16:9d:
8a:bf:b3:32:3a:aa:f6:47:3d:b9:70:d3:3c:a8:7a:
d4:bf:bb:03:85:55:3b:d8:ca:41:57:a4:39:a1:5a:
3e:1d:33:db:38:d9:78:3c:fd:6a:3f:b1:d5:4c:f5:
a6:69:46:af:30:bb:b6:f8:63:a1:36:7c:26:0a:f3:
9d:28:ac:5e:61:a8:37:5e:67:04:e7:fc:6c:34:e1:
28:e7:88:a3:5b:f0:07:ca:64:53:55:fe:70:b7:c1:
04:b0:79:5d:99:e9:71:db:db:19:23:0d:da:0e:fe:
a5:3e:f1:01:e1:52:66:e4:08:da:b4:d8:22:6f:98:
cb:13:e4:1c:03:74:5e:20:e7:0c:82:ae:d4:bc:31:
6f:7e:3e:3c:aa:5d:4d:16:f9:6d:2b:15:30:d0:e4:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.63.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ff:c1:19:53:b1:24:ca:66:99:a0:f4:5b:5e:0e:72:79:1a:
a6:0f:e6:39:f5:81:f8:71:6f:23:e6:f4:c8:5b:26:aa:da:1e:
7d:7d:a4:0d:d1:36:d9:b6:15:01:52:3e:91:49:f5:2d:1d:2c:
30:5e:d3:e8:46:49:79:f5:fc:49:b9:be:93:5c:85:ad:45:dd:
20:b0:21:07:fa:8b:18:19:c1:b0:90:1b:76:82:2c:0d:77:8f:
7a:1a:b6:6e:46:6d:68:58:04:99:f7:08:c0:67:84:81:d8:18:
46:7a:ce:b3:a9:39:ce:06:5a:e6:6d:95:6f:2b:4a:4d:a8:9f:
16:82:0c:1a:94:b3:16:8a:cb:97:35:2d:e4:f6:57:28:c8:cc:
73:76:c5:55:50:8f:73:bc:e0:ee:f7:14:87:03:e2:a8:6d:f6:
18:91:9d:18:69:7c:cb:44:d7:0b:f6:13:33:68:e5:20:37:65:
14:97:47:9a:d8:bd:4e:90:97:3b:17:3d:2a:7c:9d:ec:9b:ec:
62:aa:30:e7:2c:84:a4:68:63:c5:a0:40:8d:74:f0:c6:14:17:
68:2f:8f:2f:ad:f5:62:70:41:22:fb:37:e5:24:e5:6b:9f:54:
32:2c:68:25:94:03:43:2f:4a:cf:8a:45:ae:fe:1b:0f:08:2b:
5f:c7:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:09:15 2024 by rpki-client on console-fra.rpki-client.org