Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
File: BK0S-65UbQGDxgR9T3XojgDgcFM.cer (raw, json)
Hash identifier: amP73L7XlbQ1WlFfa9qTKpYNdlvwhYdpPJzr9ie6Dko=
Subject key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1607F0E50ADE67FA30FD33BA2380
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13148
IP: 194.153.147.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:16:07:f0:e5:0a:de:67:fa:30:fd:33:ba:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:92:96:3a:4b:5a:e6:7c:fb:c8:4c:7a:70:
64:c0:e1:08:5b:a2:fd:ae:f9:81:01:f7:b3:22:79:
65:28:a6:a3:65:91:4b:6d:b5:60:26:2e:5f:a1:3a:
e3:10:c9:9f:0a:e9:97:44:b6:72:08:f3:64:ce:cb:
a1:d5:1f:61:6e:35:b6:03:e8:8d:cf:a2:22:da:e4:
4a:b8:ba:94:11:37:d8:62:b0:f9:c4:0a:bf:66:b1:
ca:37:32:05:50:59:3b:cd:9e:67:cd:92:ef:11:82:
b0:49:e2:11:f1:41:83:e3:1b:d8:74:bb:c4:3a:73:
c4:0d:b3:7f:dd:8f:45:f7:16:99:54:26:85:33:c9:
ff:1b:b5:32:06:d2:a8:5e:ee:1d:d4:a1:cb:dc:33:
e9:48:c4:29:61:31:57:0b:ce:0a:ca:c0:9c:bf:8e:
11:ff:77:59:b7:74:23:84:5a:5e:6f:17:21:f2:4c:
d3:cc:34:8c:a2:25:9b:f7:9d:f7:7c:9b:be:39:6a:
71:85:c0:7e:74:b6:76:fe:cf:04:6b:e3:42:e0:bf:
92:68:6e:1f:f4:69:0a:ab:91:61:b7:72:a3:0e:23:
2c:2c:3a:5b:43:16:ed:58:ae:42:8a:ba:37:8f:51:
13:90:bf:bd:12:a5:ed:63:5a:fb:ea:0e:bd:0b:30:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.147.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13148
Signature Algorithm: sha256WithRSAEncryption
0c:04:b7:24:f6:6d:e2:d3:d6:38:e2:39:66:f8:d3:4d:2c:43:
d3:aa:1a:18:a6:ca:f1:a3:88:f2:ad:ac:50:fe:47:1f:e3:4d:
7e:b0:76:8d:c4:db:45:86:6f:4e:bc:2a:d7:a6:f6:4d:82:df:
b3:68:07:2c:72:36:68:9d:26:03:ff:1a:e4:53:e7:93:9d:39:
6d:7f:06:cb:31:35:ed:af:14:09:36:e6:83:fe:92:9f:b7:11:
6b:10:e3:43:91:d0:55:79:e4:06:0b:bc:c8:3f:24:79:8d:ee:
3f:ec:92:d3:b7:c2:69:a8:13:fd:0a:10:13:3c:b8:9a:91:eb:
2b:c8:57:25:4e:ac:8e:ab:87:06:56:55:15:7a:0f:99:e1:5b:
04:75:b8:ec:a5:76:85:be:8b:28:62:46:9f:9f:1c:2d:e9:27:
c4:4c:73:2b:d5:e0:6f:0a:67:85:bb:df:b8:50:84:9b:74:7e:
43:48:45:4f:d2:fc:3a:17:ae:e1:16:8d:fd:d6:ec:d8:29:7c:
7a:a5:b2:ce:b1:34:3d:65:35:e3:58:88:fc:a8:37:3e:5f:db:
2c:94:6c:95:98:26:6b:d9:c7:c8:d9:f7:9c:26:e4:f6:2c:7d:
57:98:82:96:fb:79:54:25:8b:5f:ed:17:a7:6f:8f:80:f3:1f:
06:94:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:57:12 2024 by rpki-client on console-ams.rpki-client.org