Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
File: BFAQGURA7kD13kLwwbKz03G82GM.cer (raw, json)
Hash identifier: u8s9jETyxK7nLFfRQI5D+Jp5Vfkmim+HnGtENcnRm3g=
Subject key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953FF1105BEC3947F3A3B4ADAC8CF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44109
IP: 185.194.136.0/22
IP: 2a0a:4bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3f:f1:10:5b:ec:39:47:f3:a3:b4:ad:ac:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:30:5e:3e:87:a5:29:05:e9:10:2f:83:5a:
8d:3a:40:ae:0b:dd:0d:5a:f5:c4:eb:a3:89:71:49:
57:c0:0c:62:4a:d5:24:aa:44:8f:8d:a3:af:c2:95:
4e:31:2e:86:3f:72:c2:5a:e3:c7:e1:60:63:a0:38:
13:3a:b4:15:e1:09:81:06:68:ab:2d:ba:e4:4f:44:
d2:bb:d7:50:9f:22:11:97:a6:85:92:82:3e:f8:88:
bd:4c:68:e4:4a:8a:7f:5d:57:c3:37:9b:15:aa:28:
d8:5f:4d:b5:be:0f:66:37:b6:20:e5:a2:c0:f1:59:
95:8e:43:6a:c7:f3:8d:64:3b:28:1a:fa:26:d9:1e:
f4:7a:9f:7c:2c:4e:fa:43:b3:67:84:7d:d3:91:aa:
b8:22:d0:a1:02:b9:e5:81:df:67:8e:4a:7d:21:8e:
7a:5a:eb:31:7c:24:a5:02:5b:a5:40:9f:4f:2f:68:
99:bd:02:dd:61:5b:f3:f2:93:0a:fe:f3:ec:9b:9a:
b1:36:be:7d:93:ad:c7:6a:33:f2:17:78:1b:9a:5e:
97:52:00:63:d1:9e:ef:a1:ff:d7:07:6e:dd:88:76:
50:8d:39:a4:7b:ee:19:83:dd:10:0a:c4:bf:f1:57:
28:3e:4d:34:ae:88:31:74:00:d6:87:6a:8d:68:06:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.136.0/22
IPv6:
2a0a:4bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44109
Signature Algorithm: sha256WithRSAEncryption
08:4b:ca:2a:3c:2d:8b:37:b2:8d:c3:1b:71:ab:a8:a7:21:1c:
20:2b:d9:fb:fd:db:60:ee:9c:92:5f:12:2f:9f:5d:b0:13:56:
8f:ed:cc:fa:7d:7e:e5:f4:b8:41:10:d6:fd:8b:8a:f6:03:d5:
c7:18:a1:88:89:d9:91:90:6a:e3:69:1e:aa:ad:ae:13:6f:7b:
61:dd:4c:26:2f:22:0f:14:28:19:35:ff:64:4f:72:2a:ac:de:
43:5c:d7:71:c8:14:cd:c2:c0:a0:b9:f7:a1:ac:c1:9f:7a:93:
b5:c8:21:23:b6:58:ef:ca:a0:f0:22:fc:d3:88:5f:23:04:32:
1b:06:26:1a:cb:d7:04:39:0c:2f:e7:a1:cf:cc:d7:eb:34:09:
2a:a4:a1:d5:d9:50:43:74:0e:83:77:a2:a9:17:3f:f0:32:0c:
15:20:76:18:4b:6e:2b:d9:7a:5e:2c:59:2f:b8:b3:4d:30:a4:
95:dc:6b:4f:f4:8f:8f:1c:bc:b1:2e:6c:e7:2c:7b:7c:cb:10:
6f:2f:9d:9f:19:da:76:9e:5a:8e:30:63:53:04:4d:b7:cd:c2:
38:9c:7a:0a:4c:48:b9:91:62:f8:c1:da:c4:2b:1b:b8:8e:fa:
96:27:51:18:2c:20:a9:0b:c4:c1:eb:d7:ce:03:13:e9:b1:0a:
16:37:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 15:03:50 2024 by rpki-client on console-ams.rpki-client.org