Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer (raw, json)
Hash identifier: M9bMIV9jK6DAWAgOUyMLIUkEN309TKCZtLoJFRsE5no=
Subject key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E415C037567E5A37264160F37FA194A42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Mar 2024 09:05:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.85.192.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:5c:03:75:67:e5:a3:72:64:16:0f:37:fa:19:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 15 09:05:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:be:72:62:b1:64:8e:21:e2:5a:05:17:05:
1e:75:9f:b3:50:34:02:c7:d3:07:86:76:81:8b:96:
e1:da:3e:70:ab:e1:72:e8:ac:f3:60:f4:f4:79:eb:
b1:45:b0:2d:c2:46:6f:00:ca:b5:30:67:2e:16:cb:
c5:f3:66:9e:0b:f7:5d:1f:b5:a0:2b:37:74:eb:a6:
25:50:c2:d0:bc:13:f7:4e:63:c6:62:87:b2:18:ed:
92:9a:73:46:77:5c:21:fd:62:0d:56:8d:55:01:8d:
88:60:d2:c2:e4:ca:99:63:68:e9:7e:62:e9:01:22:
4f:f5:fd:6f:c5:74:61:b1:a7:6f:10:71:b8:f2:48:
31:cc:a6:0c:e2:30:9c:c4:41:d6:a7:91:84:df:84:
72:56:9f:90:6b:a3:0a:4d:77:32:a7:2c:ce:35:b3:
4a:18:a8:68:1e:d3:9a:82:ed:06:b5:02:04:2a:c1:
5d:46:a0:c5:30:9b:7f:fd:1c:05:82:75:a1:01:64:
ba:4d:9c:e2:1f:17:2a:0c:7b:b7:6d:29:48:44:78:
7b:fb:32:c0:52:5c:3e:8d:13:7b:64:b5:6a:1e:f0:
05:b8:a9:4e:c3:97:e3:1b:60:9a:ee:03:e3:0a:f3:
99:8c:1e:30:38:f0:d3:0a:d0:0d:da:e4:c9:66:5d:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4a:a2:ea:6a:d7:7d:05:87:7e:5b:14:d7:b5:94:d1:ce:2b:
51:93:5f:7d:97:20:84:62:f8:01:3b:0b:17:ba:e1:38:7f:d3:
88:8b:9d:04:ce:40:8f:94:86:cf:a7:81:38:b3:b5:3b:9b:85:
1e:29:a3:12:5c:c5:f3:88:4f:83:be:82:5c:77:25:a3:f1:00:
93:0e:38:95:f7:2f:ad:52:cc:5d:83:e2:22:bf:31:a3:a7:8c:
1b:d2:18:21:0f:b1:90:f7:43:85:3f:50:58:ce:93:cc:ae:38:
2c:7b:08:47:d2:f2:ec:42:8c:cf:12:5a:1b:00:8e:56:dc:79:
2b:f4:a5:cc:f1:00:d7:bc:6e:28:30:0f:ee:fc:89:c6:98:32:
fc:4f:92:12:64:d3:4f:e5:89:e8:1c:bc:dd:b9:9c:eb:a7:ae:
fb:26:07:8a:c1:41:2e:26:28:89:22:1c:92:1d:cb:a6:7c:c3:
20:af:e3:ee:23:68:a1:ab:af:5b:5b:44:ec:e0:71:d0:3a:b1:
c8:7d:87:a0:07:1f:eb:cb:bd:ef:2f:18:c5:bb:e6:ff:41:be:
3f:3f:50:ff:4e:b2:c8:65:a6:b0:fc:4a:58:3e:91:40:6a:30:
f0:5d:3c:0f:5a:45:cb:bd:7f:98:17:46:f0:52:58:59:f3:4e:
73:04:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:44:15 2024 by rpki-client on console-fra.rpki-client.org