Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer (raw, json)
Hash identifier: 7gzSPqBsGuT+MyAc5q8teVGqJ9InmnU4ixNyskwNI7A=
Subject key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC13630F5975CD565A022F47C3CBAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57458
IP: 130.255.176.0/21
IP: 2a03:c080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:13:63:0f:59:75:cd:56:5a:02:2f:47:c3:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:6d:2a:5c:75:b3:eb:09:82:c0:52:bb:b6:
0b:f0:86:d5:ad:13:b5:4c:7e:dc:cf:bb:bd:29:a1:
33:10:83:87:0f:de:41:eb:e5:b2:cb:2c:49:c6:fa:
eb:1d:c7:07:c6:ed:59:a9:14:6b:7d:24:b3:a4:5a:
46:47:e0:a7:64:e6:19:b7:5c:fe:19:3c:8d:bb:93:
ae:e0:37:20:57:a7:ab:60:5e:3c:db:ee:56:ce:5a:
ed:dc:12:10:13:f8:79:11:8f:17:26:06:64:30:95:
10:9d:56:13:14:5c:18:f5:3d:b8:5d:2d:58:1d:c2:
12:b0:11:11:e9:74:c5:60:a5:13:f9:9b:bd:67:23:
2d:33:8a:50:c1:7f:29:08:0e:82:ac:7a:b3:ad:4c:
df:c4:93:0f:6b:17:7d:18:b3:80:00:66:d4:13:61:
b1:e1:84:d8:9b:39:69:d4:0a:b7:b1:54:ec:5d:87:
97:80:49:53:4e:3d:d4:f4:77:84:ad:ac:b0:37:46:
35:09:24:e0:59:d0:3c:e2:e7:7b:cc:0b:37:d0:6c:
53:64:64:21:1a:14:03:fc:66:0b:03:43:68:50:2a:
28:61:e6:f0:b1:58:5a:5c:b7:05:42:e5:45:b2:2e:
db:d9:d9:a3:27:24:cf:9b:98:bd:b1:6b:14:0d:16:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.176.0/21
IPv6:
2a03:c080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57458
Signature Algorithm: sha256WithRSAEncryption
48:8e:69:68:49:cc:91:a7:39:03:7e:59:02:06:a0:0d:8b:4d:
25:52:84:83:69:73:c6:e8:b3:67:68:a5:d9:84:02:3a:de:93:
b3:50:fa:69:08:b2:fc:47:0b:64:34:51:d4:a3:f9:b0:a8:ce:
cf:ed:b0:cf:48:08:92:aa:60:9c:a3:0d:10:2b:94:1c:af:fa:
3e:02:c0:06:9f:7b:5a:95:97:ba:92:27:fb:ee:54:64:da:25:
49:64:31:6f:f8:5b:b3:2b:34:1d:92:14:19:3b:a8:02:dd:bc:
91:ac:29:8a:b0:11:20:20:b1:02:0d:54:30:b0:35:31:69:64:
1c:70:d5:07:a2:22:34:f2:c2:af:75:bf:8a:1c:0c:f5:c5:bc:
2a:96:62:e0:e2:e1:60:10:e4:99:21:98:cb:c8:ab:19:20:da:
1f:3c:79:82:fe:b9:98:b4:9a:bd:4e:65:05:d9:48:8d:80:b3:
7d:ce:2e:e7:58:7c:d7:85:0d:14:49:d6:76:c1:68:c5:7f:4c:
93:46:f1:44:75:4a:bd:0f:bb:00:5b:32:97:ba:67:35:14:be:
87:de:28:3c:b0:18:eb:fe:32:e3:88:0b:89:3c:63:03:2e:85:
c6:7f:96:0c:e7:8e:1d:a6:d3:da:88:81:f4:cc:04:fb:9c:8d:
d3:16:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:22 2024 by rpki-client on console-ams.rpki-client.org