Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
File: BGLgBWSpNA_0c505USFsRqjvxk8.cer (raw, json)
Hash identifier: uKTj2+KX/7oXnJCqBAYo6bhTWjmZo06mKnma7VZx3m4=
Subject key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2D9827842EC87B229CB67F540B79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60398
IP: 217.150.86.0/23
IP: 2a02:65c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2d:98:27:84:2e:c8:7b:22:9c:b6:7f:54:0b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:1b:ec:dc:55:1e:e6:b4:d3:bb:39:b1:09:
47:fa:1c:f5:a2:03:7f:19:0b:33:89:cb:94:ea:a3:
83:fc:80:07:4c:f1:0d:53:55:69:e0:ca:b3:5f:80:
5e:98:49:e1:fd:58:29:61:f2:2a:b8:b3:09:3b:b3:
f6:66:b8:cd:a4:04:dd:5e:81:fe:df:cd:ef:e2:28:
70:a6:4f:72:70:08:7f:90:3a:67:77:3d:28:6d:0a:
e4:f9:17:30:8f:09:7b:e0:a4:81:1e:25:11:22:f6:
30:67:5f:50:e7:a3:43:5f:de:e7:a8:88:47:fc:0d:
19:51:d2:6d:7b:1f:e8:1b:68:9e:fa:84:2d:88:cd:
eb:11:70:1f:96:83:e1:58:50:16:ed:4c:b2:d0:fb:
0b:ae:f5:fd:6c:94:c8:5e:8c:5a:bc:45:b5:21:cc:
9f:47:ae:81:70:5f:aa:21:1d:28:57:d9:aa:f8:9c:
52:b5:2a:cc:72:9e:e4:b2:2e:bb:7d:51:dd:ab:53:
a0:a1:42:03:f6:eb:b8:b6:2c:3e:83:fd:81:22:0e:
2f:de:b8:98:db:af:b9:de:89:58:c2:c0:ef:1c:b5:
d8:f3:cd:be:b1:36:9e:e1:84:bf:0f:d3:56:cc:b6:
8d:d1:0b:3d:eb:c3:ac:66:c9:9d:98:2f:cf:74:3a:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.86.0/23
IPv6:
2a02:65c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60398
Signature Algorithm: sha256WithRSAEncryption
72:8f:94:42:e5:3e:ef:13:b7:34:e0:f8:77:70:cb:c7:20:da:
ad:ff:fd:d0:eb:1c:16:b2:71:d6:2c:d0:14:e0:b9:c1:6a:a1:
96:a7:e4:0e:04:de:22:ef:58:7b:e8:18:f0:2e:e0:df:73:20:
e2:c2:7c:6d:5c:0b:f2:e5:e4:56:26:dd:4f:1a:29:99:b5:59:
9a:44:23:f2:ca:20:da:28:2d:fc:42:2b:40:87:d9:d9:1b:db:
3a:6b:d0:46:fe:0d:e9:da:e8:1e:80:b0:e9:6c:07:3c:fd:3b:
2b:22:2e:ef:fb:24:0e:7d:04:b9:83:f2:60:d3:38:6f:6f:9d:
b5:6b:ba:b7:1c:87:a4:eb:7b:72:72:68:c3:8e:34:f9:4b:bc:
c9:0b:a7:f6:35:fe:b4:26:c6:ad:92:8c:57:a2:17:b7:58:6b:
1e:47:24:30:96:ae:b7:54:27:46:9d:9c:e6:51:fb:77:97:a2:
2f:ab:40:6e:ea:a7:0e:20:d3:bd:38:6a:29:6d:e8:a7:b3:5d:
d3:c0:c2:38:de:30:c8:3d:42:e7:25:62:d4:26:08:7d:6e:cb:
e0:7d:07:97:f6:be:53:38:13:bc:26:45:b5:c7:f3:4f:4c:e8:
c7:36:b6:f7:3b:3f:20:16:b8:44:8a:8d:2a:20:c3:87:76:46:
04:18:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:32:23 2024 by rpki-client on console-fra.rpki-client.org