Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer (raw, json)
Hash identifier: BcDV10Qlty7kVuTN3rcO5opGXnVYlwumzpQZRN/HC/c=
Subject key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F32FD19E88C1DF9223997C0D9162953F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 May 2024 07:09:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8529
AS: 45053
AS: 59605
IP: 82.178.32.0/23
IP: 82.178.158.0/23
IP: 134.0.216.0/21
IP: 151.248.96.0/20
IP: 185.200.124.0/22
IP: 185.201.100.0/22
IP: 185.201.192.0/22
IP: 213.202.0.0/21
IP: 2a02:f040::/29
IP: 2a14:1000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:fd:19:e8:8c:1d:f9:22:39:97:c0:d9:16:29:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 07:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:96:15:ec:26:e2:27:ad:fa:3d:0c:d3:b3:
da:05:4c:07:cf:d3:f0:ac:c4:3d:fd:8b:ea:a4:65:
cc:72:cc:3f:65:a6:b6:4e:58:d8:76:01:fd:01:8b:
04:15:e7:cd:21:a2:5f:17:ca:74:1a:de:a6:f9:0a:
0a:8f:6b:b8:e9:52:f2:99:f6:e5:77:b2:fa:cf:aa:
1e:1d:c1:dc:4c:06:d6:fc:f1:ee:b1:d0:4e:80:53:
65:bd:87:88:da:7e:10:36:e4:8c:e5:25:8e:a7:c6:
67:85:b4:4a:1b:ea:1e:c1:92:3e:5a:66:9a:a7:a0:
fe:1f:42:4a:fe:fa:bf:ec:59:0e:ad:72:58:fd:37:
21:0b:e1:0f:97:62:b2:e5:18:83:37:22:ed:5c:40:
e6:8b:c9:ac:ee:bb:b3:12:5e:64:0a:fc:ee:7f:8f:
ae:d3:2e:58:21:2d:88:99:8d:d2:98:02:58:f7:b3:
29:e0:f9:dd:4c:52:1f:d3:49:47:4c:2f:6d:05:e3:
32:70:1a:36:d0:29:92:8f:07:6e:df:6b:d5:cd:f2:
d7:d6:b3:dd:ea:14:16:20:6f:5c:5b:a6:bb:83:a7:
66:95:9c:95:6b:a1:b6:40:77:a0:24:0c:08:8f:91:
43:e6:e1:94:6c:3e:3d:0c:ba:04:07:99:28:b3:76:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
151.248.96.0/20
185.200.124.0/22
185.201.100.0/22
185.201.192.0/22
213.202.0.0/21
IPv6:
2a02:f040::/29
2a14:1000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8529
45053
59605
Signature Algorithm: sha256WithRSAEncryption
14:5e:12:ad:0b:f1:87:ec:86:63:aa:57:6b:5e:53:21:a3:0a:
d7:62:cd:14:4c:c7:a3:9c:87:76:5d:fd:62:88:e5:1b:c3:97:
68:55:f5:7f:da:d9:01:ec:e9:a1:76:c6:fe:18:04:0a:0d:90:
53:4d:3c:83:ae:2c:87:0d:b3:59:7b:1c:1d:84:c0:d4:83:67:
ad:5c:a9:b7:b6:33:fb:7d:81:f5:4e:1a:b3:22:9b:93:f3:aa:
93:cf:0d:3b:06:43:c8:c7:4a:b9:fc:69:47:6b:fb:03:3c:10:
6c:8e:9c:f1:ae:b3:2a:b1:b1:2b:72:6f:09:b3:fa:fd:34:48:
a2:a6:4c:6c:63:85:1e:a1:d6:3b:51:d2:15:4d:bf:55:65:b4:
22:0b:6e:05:13:bb:ad:3b:7f:d0:a9:be:ec:39:82:93:a6:23:
77:74:8e:e1:18:40:da:a8:a4:1f:54:3b:c7:51:4a:32:66:68:
54:1f:97:fa:0c:ca:fc:f6:08:a7:fc:3c:6b:6f:bf:c7:f6:62:
a5:6b:2a:c1:dd:bb:ef:26:b3:2c:f7:55:33:b9:a4:6f:9b:64:
8a:19:a7:4f:2d:da:3b:e8:62:87:e1:cc:f1:f4:75:d9:bb:2c:
bf:db:5e:17:e2:9b:89:c7:d1:8f:ea:ff:be:7a:99:86:33:6e:
28:d6:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:20:02 2024 by rpki-client on console-fra.rpki-client.org