Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer (raw, json)
Hash identifier: 5Mxhe4TSn7xpUUBgu4LY5Eju7KK6Oix4F5CWoM7nLFw=
Subject key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348FCBEDCF4CF0A600F657BA33A092E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50392
IP: 91.237.244.0/22
IP: 176.121.13.0/24
IP: 176.121.15.0/24
IP: 193.106.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fc:be:dc:f4:cf:0a:60:0f:65:7b:a3:3a:09:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04747b565844e3e2fc712fab5be85924aac58643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:ab:6d:ff:26:5c:d7:2d:2f:d6:25:d2:ca:
60:6d:be:35:8b:d2:09:67:ac:fb:c0:a7:2e:59:97:
48:26:21:79:17:d7:2e:15:99:3f:97:9b:13:22:4b:
74:fb:84:f1:58:f2:5d:8c:31:de:65:e8:1d:12:fc:
19:73:76:95:a6:4e:fb:01:43:b6:87:9d:03:4c:3b:
d1:00:ce:0a:99:e2:ba:5f:44:fb:62:3c:3b:99:53:
3a:f3:7a:ce:77:ce:eb:45:f7:89:e8:e3:af:69:84:
ea:2d:d0:ac:5d:59:b6:cf:c5:63:63:64:e9:a0:e4:
3e:97:35:ef:05:e7:ab:88:cc:a7:04:f9:9f:b6:fc:
3d:af:15:33:15:76:ae:9b:60:92:5e:20:1a:3f:f7:
1a:f2:d7:81:6b:83:1e:33:f9:a9:e3:7c:3b:25:82:
76:12:21:8b:be:4a:db:a8:45:20:e3:27:dd:65:3b:
82:66:2d:2d:5a:40:32:c0:33:94:33:93:17:0c:91:
11:8e:6e:87:b4:05:3b:d3:58:5b:46:33:b2:2f:37:
44:5f:c6:33:f2:cb:ea:bb:1f:71:7a:7a:2b:5a:32:
6e:d4:18:a6:2b:10:61:09:52:b9:e3:d9:7e:4f:33:
3a:f9:7d:3a:66:ff:5f:b9:e9:76:8b:aa:3f:1b:5f:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.244.0/22
176.121.13.0/24
176.121.15.0/24
193.106.144.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50392
Signature Algorithm: sha256WithRSAEncryption
69:59:da:9b:11:78:86:38:82:c9:30:07:2a:22:09:7b:77:63:
b1:a2:e9:e5:00:5c:bc:f6:3a:51:c5:84:48:ac:30:a6:02:6b:
69:20:8a:fe:1e:a1:5b:e3:00:14:12:97:ca:fd:fe:e2:85:8e:
23:7a:50:65:f3:e9:fd:b1:b9:7d:41:5c:53:2f:f5:15:a5:b7:
1a:be:6c:d9:9f:20:4f:c9:03:31:90:7c:33:8c:5b:d0:d8:0a:
1b:33:77:44:f0:2c:ca:b7:6c:ac:96:4c:4c:3e:e1:8f:20:56:
e6:d8:f5:30:0d:09:0c:8f:8e:52:62:8e:5f:4c:94:b4:3c:fa:
f2:9b:54:e5:d2:aa:02:b7:12:ed:23:83:a4:65:22:47:47:ae:
3b:de:2a:36:b3:f9:0e:c2:79:75:d7:3d:c3:e7:1b:b0:70:28:
2a:4e:d7:7e:d0:6f:ca:23:81:38:31:0a:20:57:68:a8:ee:50:
fc:db:e2:e6:b4:ce:c1:ea:f1:1a:44:1f:6e:b9:52:5f:0f:e1:
69:e7:32:5c:44:ee:24:ad:c5:84:03:0c:18:38:17:6c:28:3a:
1c:a7:fe:fa:a9:b9:e5:d0:a7:76:77:8a:ff:9c:8e:48:6f:e8:
a7:52:77:e5:fa:95:2c:43:82:c8:ee:0f:a8:26:06:ab:33:82:
44:50:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:22:29 2024 by rpki-client on console-ams.rpki-client.org