Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
File: B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer (raw, json)
Hash identifier: Avi4oUeYE5P8ggfuBvdX4P+G9nZMmhHcPMmxpnjjtZw=
Subject key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5004D70ADC9BF04FC39DE1059CB52CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 19399
IP: 131.205.0.0/16
IP: 136.155.0.0/16
IP: 147.180.0.0/16
IP: 159.38.0.0/16
IP: 192.44.240.0 -- 192.44.251.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4d:70:ad:c9:bf:04:fc:39:de:10:59:cb:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07730862dfb740166df453fb6e9c8508af5d9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:98:20:bf:3e:0e:00:81:ae:70:55:ce:88:
ab:91:97:0f:be:ff:f2:70:05:b5:6c:7e:26:ba:4f:
a1:ce:ca:ae:63:e7:46:20:13:ac:e7:93:05:4e:62:
e1:b9:49:f2:88:16:9f:d4:39:85:3d:14:5f:0f:c8:
5d:03:3d:d6:2e:f6:84:f5:d8:ce:3f:24:62:df:e5:
69:39:b8:1a:3a:22:6f:01:90:05:14:7a:be:c5:3c:
20:38:25:fb:b8:ac:47:8f:a4:47:99:18:1a:2c:51:
dd:ff:f0:9c:3d:36:fd:60:38:d9:75:ed:ef:1a:da:
68:3c:04:50:87:11:b9:f4:0f:00:4a:48:c6:e2:11:
c0:9e:89:d3:36:a9:d5:6e:6e:10:7d:27:c6:c2:a7:
22:6e:b5:b4:5c:be:4a:8f:be:7a:85:c5:e1:23:99:
84:e3:41:5d:9f:7f:51:9b:ff:f8:cf:41:96:b3:c2:
7a:34:fe:61:0c:d9:5e:92:d9:a8:93:0b:95:19:2e:
45:02:13:25:0b:99:bf:30:22:3c:df:c3:4e:4c:9f:
51:0d:2a:12:4b:24:f4:0d:ee:2a:ef:e6:61:6f:bc:
85:37:a8:fa:71:fe:fc:39:61:51:5b:bf:ea:a9:dd:
6f:32:c2:9e:5e:13:b3:8c:1d:ce:49:67:d5:b9:a9:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.205.0.0/16
136.155.0.0/16
147.180.0.0/16
159.38.0.0/16
192.44.240.0-192.44.251.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19399
Signature Algorithm: sha256WithRSAEncryption
9c:31:31:5f:ea:ca:ef:58:11:0e:31:a9:22:ba:17:03:64:ae:
27:45:70:c6:02:90:cb:38:2e:4c:5c:df:6f:9e:e2:ba:39:62:
eb:03:75:4c:3d:7f:72:02:6a:98:e8:7e:d7:da:24:8d:b6:85:
e5:4b:16:c0:fa:e9:41:4d:22:9c:4d:9a:36:6f:11:63:89:96:
ad:70:b6:94:ff:ad:9b:82:15:2a:22:14:e5:29:37:8c:0b:9c:
bf:eb:ff:b7:2e:99:b9:3d:f7:57:38:b3:42:96:3e:94:89:d9:
3e:86:3e:1d:b0:35:9f:12:49:29:f6:d2:7b:8f:61:24:57:3a:
2c:e3:25:3a:3e:d7:11:32:23:22:73:d0:9a:a2:bc:7e:d8:17:
17:eb:0f:8d:a8:76:6f:91:bf:de:ab:af:36:52:bd:77:ea:f0:
2f:c0:94:f2:7b:71:54:33:60:02:de:8b:a1:52:4a:a0:98:d2:
57:1c:c4:f4:63:51:f5:9c:a3:65:52:8d:a6:2a:7f:1d:27:ff:
52:cc:79:71:7f:1d:e5:b9:77:7e:bf:93:35:f7:91:8c:e8:d6:
f5:06:b2:7d:c0:7a:2f:e6:88:3d:92:05:db:19:f0:df:44:f8:
84:49:5b:60:6e:81:04:97:4f:7a:2b:d2:60:fc:f5:7d:24:dd:
aa:df:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:32:14 2024 by rpki-client on console-fra.rpki-client.org