Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
File: BKSudHHI82IdUyVtdfEQt0iZeJg.cer (raw, json)
Hash identifier: zFFK6yz+98eFpx2dp4TPtGXTy24aZNQHfYRgFgIWQYg=
Subject key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E6DF5692FD5C75103D9E3450523EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208721
IP: 45.14.116.0/22
IP: 2a0f:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:f5:69:2f:d5:c7:51:03:d9:e3:45:05:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04a4ae7471c8f3621d53256d75f110b748997898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:58:8c:df:1b:ab:d0:85:89:00:f4:57:3a:
ed:fe:ce:29:9a:79:c4:d0:0e:5e:4d:cb:cb:d3:98:
2c:87:ed:2a:65:9b:50:09:59:f6:84:72:dd:38:a4:
49:e4:27:21:1c:ca:90:1b:fe:c1:51:32:07:ce:71:
bc:c7:b7:43:44:ba:b6:a7:41:ef:6e:dc:61:75:71:
2c:a8:1d:e1:b8:bd:b5:4f:80:53:c6:02:e2:d2:be:
5e:64:66:d5:23:de:4e:a7:c6:b6:a5:7e:a0:b1:2c:
44:60:cc:26:fa:61:b2:da:9c:cf:33:71:8f:81:87:
35:20:e0:05:41:d6:f4:93:b2:2c:14:40:af:79:21:
91:16:fc:dc:06:43:c0:28:dc:01:fb:bb:83:88:67:
76:12:0b:88:45:e7:ee:fc:25:e6:cc:bf:29:fc:ef:
92:a1:51:92:82:8b:fb:e2:09:de:9d:8e:7d:8a:af:
e1:ed:63:ab:22:7a:25:a6:82:2a:a4:a5:2d:e6:36:
59:e4:13:cd:05:59:eb:48:22:fd:6f:6b:b3:1e:46:
04:b9:31:90:17:43:75:03:bf:09:3c:31:e3:d6:62:
2d:a2:b7:40:e0:67:c6:68:c4:ed:df:3e:34:78:fe:
34:cb:b0:14:1e:5d:fe:3a:2b:4b:3c:b4:88:98:d1:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.116.0/22
IPv6:
2a0f:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208721
Signature Algorithm: sha256WithRSAEncryption
59:41:eb:d8:4e:e7:1a:48:2d:9e:8a:d2:26:81:e3:86:1c:1b:
51:f2:89:66:7c:4f:e2:dd:6a:4d:aa:2b:5f:c3:e2:13:21:f3:
d3:6d:81:f9:c2:b4:68:11:13:40:bd:de:8e:6f:fa:77:df:0e:
d6:2b:76:08:25:b8:0c:cf:3d:0f:32:7d:65:b2:8f:35:6c:2e:
61:36:dd:50:62:84:9e:11:3b:00:b5:96:85:53:ff:dc:4d:66:
c1:c6:cf:94:fe:5c:14:23:c3:f1:fc:ff:d2:27:cb:80:97:a6:
26:2f:0e:eb:ea:73:1c:b7:7d:6c:52:b5:2d:d5:f9:f6:f7:26:
b2:d8:20:26:34:26:7f:1b:95:07:ad:f6:15:2b:ae:99:2a:c4:
dc:b4:b3:bb:6c:3f:77:1f:f7:ca:a2:e8:7e:80:03:ff:15:f8:
e5:07:c9:58:55:79:62:a1:91:d6:46:ff:5e:9a:e8:71:25:68:
9a:e1:da:ee:8b:41:41:33:a1:f5:8b:42:fa:92:ee:95:27:7e:
c2:8b:08:0e:5b:57:4f:22:f6:f0:4d:8d:6f:b6:e0:02:f4:eb:
af:70:b6:06:7d:d6:61:3e:92:c1:7b:15:6d:2a:94:1f:f5:16:
a1:09:9c:1b:96:f9:db:85:b6:72:83:12:5b:02:ce:2d:39:f3:
88:c9:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:09:31 2024 by rpki-client on console-fra.rpki-client.org