Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
File: BCSFBLVFValEOwKjPTUakChju5k.cer (raw, json)
Hash identifier: O0N349QXCFBKxGWGsYNI+N59/fbu87rvXnm/bz3mSaQ=
Subject key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251A2E2110A2BF847C2BC4757C0467
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198063
IP: 194.116.167.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1a:2e:21:10:a2:bf:84:7c:2b:c4:75:7c:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04248504b54555a9443b02a33d351a902863bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:37:c3:29:c1:6c:fa:6d:e9:2b:1d:f5:f3:
e1:06:45:31:e2:93:41:de:75:96:84:d1:ac:d2:c3:
d7:ce:9c:9e:0d:39:fb:12:14:11:1f:b8:d3:1e:33:
20:14:6c:b6:86:45:ba:28:08:43:1d:3d:1f:7b:51:
9a:e4:4b:50:b9:9e:5c:73:cd:95:15:a8:3b:81:34:
11:09:eb:86:d5:ef:0f:e9:79:16:f4:1b:76:4e:b9:
d3:f1:fe:db:90:4b:11:32:c1:55:d4:9f:67:da:c0:
56:01:78:fe:94:c0:49:06:18:0b:3a:f6:fd:c1:3b:
d5:aa:d5:68:61:b4:18:62:02:3e:5e:c1:2b:84:b3:
6d:f6:10:64:c4:ea:d4:a7:1e:81:15:38:ce:2e:fe:
37:82:62:56:a5:56:ad:06:2d:c8:e6:6e:db:0e:11:
55:bf:8e:5e:61:9e:09:7a:ac:e1:72:4a:46:9a:23:
9d:8f:44:9b:5d:19:84:f7:27:db:e7:7a:23:8c:1e:
ff:12:d6:4f:67:4b:a6:fb:09:61:97:82:89:e0:88:
9f:2b:cf:86:8f:3d:8c:bb:89:ee:de:05:2b:78:95:
df:9e:78:17:6d:b7:43:d8:fb:c1:72:ef:76:84:53:
3d:cb:bb:3a:0a:d0:25:1f:a6:43:5b:e1:8d:9e:7f:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.167.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198063
Signature Algorithm: sha256WithRSAEncryption
9d:30:aa:8d:1e:a8:c5:b4:44:5d:a0:72:ab:43:97:b7:a8:73:
bd:36:65:a2:01:41:90:d7:1e:b5:b0:57:e7:24:3e:ac:fd:54:
24:94:c0:97:26:46:3f:15:86:d2:34:4f:0c:51:b8:6f:e6:0f:
dc:99:54:9c:12:99:3c:99:7c:dc:42:07:8d:a7:60:a5:eb:c2:
51:1b:f5:5c:ca:4e:ee:82:25:9c:34:67:ce:be:43:50:88:35:
6b:8a:ac:13:a9:f6:ef:2c:d4:6b:59:63:8b:9c:c0:1e:39:d1:
cc:8c:23:33:65:5e:8e:b2:bb:1f:ad:77:28:94:70:78:01:d9:
8a:6b:eb:3f:f5:83:a6:5f:6a:c4:41:7f:67:22:49:75:46:80:
23:3d:ac:87:97:ee:61:f0:bb:9e:b6:84:95:c4:5c:74:b9:d1:
0c:57:08:e9:d2:94:90:35:a8:8c:4e:6f:2e:d1:2d:86:05:98:
0a:a7:2c:65:87:d6:bc:e7:cd:74:26:1a:ae:c5:f4:8c:13:36:
1b:5b:eb:57:88:36:9c:a8:a5:26:ec:a8:c0:89:9f:b5:84:27:
d6:c1:f1:44:a4:08:d5:67:16:eb:4c:66:93:79:7e:0d:5b:ee:
f2:58:20:b2:47:d4:bf:59:69:27:0a:e1:cc:34:5f:4b:dd:ab:
b7:69:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:51:56 2024 by rpki-client on console-fra.rpki-client.org