Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
File: BLw664svC0huXIwMec6djWixj5Y.cer (raw, json)
Hash identifier: DIGWeBM032Rtf1XZre+Pm4k/KHobUJ7bw1MIVROLeEY=
Subject key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5A0DEE76AFEF48E8FB50F2DF705AFA53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 11:07:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.96.240.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:0d:ee:76:af:ef:48:e8:fb:50:f2:df:70:5a:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 11:07:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:9d:2a:01:73:15:b1:eb:a7:7e:38:a9:6a:
15:5d:a9:67:81:58:91:6a:a3:61:1b:6e:49:2c:ff:
a4:02:95:3c:7d:5c:92:27:2e:44:c3:b0:10:4b:d5:
9d:4b:38:73:65:8d:6b:13:b9:ff:83:8e:a7:db:ce:
97:36:72:d1:b8:54:27:0f:ab:50:53:5b:21:b9:53:
ea:7e:fe:8f:87:7f:23:57:30:0e:4d:f5:38:de:d5:
d8:33:70:86:58:8b:cf:3f:0d:43:f3:8a:5b:8a:0a:
4d:07:4f:3e:34:68:c1:75:60:33:96:8e:a1:a9:54:
cc:80:20:1d:15:b5:96:86:48:76:ca:1a:09:76:d4:
a0:6f:94:78:2e:e3:2e:09:bf:ae:d0:95:36:60:7a:
a0:75:e3:72:5e:a6:93:e9:5a:75:5c:d4:14:88:ad:
39:2b:aa:70:39:82:de:0a:2a:89:c3:26:01:48:06:
f6:fb:23:84:c8:c9:8c:b3:80:6b:d7:f5:9a:7e:ae:
aa:03:06:bc:2f:0c:76:db:77:e2:fd:3c:f6:f0:59:
c9:45:49:8a:36:bf:a6:d7:9d:d4:96:bb:d8:7f:4c:
b6:0c:55:4d:c0:73:c5:c1:1e:c6:3d:1e:44:cb:b4:
d1:b2:39:d1:a7:20:60:4a:c4:79:a8:93:b3:6f:38:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.240.0/24
Signature Algorithm: sha256WithRSAEncryption
69:60:3b:17:bd:e5:83:6f:76:2e:fd:94:ad:d9:49:ea:72:13:
06:09:b2:8e:ef:c9:6c:bf:b1:e4:b5:62:46:dc:e8:a9:79:82:
39:8c:d2:57:50:2f:72:0d:af:2f:4c:f9:61:b2:80:8c:2b:49:
30:e3:dc:06:a3:b2:af:b6:78:82:fd:bd:95:ba:e0:7e:f2:a9:
17:14:1d:02:93:c0:4b:51:7a:64:d2:36:e7:df:0b:d9:96:a4:
6e:05:93:98:07:9a:76:5f:51:f5:e6:07:7a:95:22:b6:03:45:
58:48:89:70:84:95:20:e3:e4:a1:35:e2:55:ae:30:b1:11:91:
2f:8c:ae:0b:7b:32:f5:45:3e:27:1d:94:94:97:0a:8c:8d:5a:
35:bb:4f:55:60:56:8c:10:89:42:16:55:36:8b:ae:97:3d:fe:
9e:c5:53:12:69:88:fb:6f:ed:d9:f9:40:e1:ca:06:de:2b:14:
70:62:2d:21:53:b1:79:a4:97:4e:de:29:cb:ac:23:04:d7:6c:
26:ca:c8:d8:01:89:ff:60:4e:70:d6:36:41:06:a2:d9:0f:08:
cc:3c:66:90:5f:0d:3d:bd:26:88:ca:5d:5e:03:91:2c:3e:76:
d7:03:ac:dc:22:e3:9f:d1:76:82:ff:ab:1d:60:30:02:bd:f0:
93:9c:7b:58
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY1aDe52r+9I6PtQ8t9wWvpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTMwMTEwNzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJjM2FlYjhiMmYwYjQ4NmU1YzhjMGM3OWNlOWQ4ZDY4YjE4Zjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9SdKgFzFbHrp344qWoVXalngViR
aqNhG25JLP+kApU8fVySJy5Ew7AQS9WdSzhzZY1rE7n/g46n286XNnLRuFQnD6tQ
U1shuVPqfv6Ph38jVzAOTfU43tXYM3CGWIvPPw1D84pbigpNB08+NGjBdWAzlo6h
qVTMgCAdFbWWhkh2yhoJdtSgb5R4LuMuCb+u0JU2YHqgdeNyXqaT6Vp1XNQUiK05
K6pwOYLeCiqJwyYBSAb2+yOEyMmMs4Br1/Wafq6qAwa8Lwx223fi/Tz28FnJRUmK
Nr+m153UlrvYf0y2DFVNwHPFwR7GPR5Ey7TRsjnRpyBgSsR5qJOzbzjEFQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAS8OuuLLwtIblyMDHnOnY1osY+WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjL2IyYmRk
MC1mMzgzLTRhNWYtYjY1YS1mZjIyN2U0OTkzZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvYjJiZGQw
LWYzODMtNGE1Zi1iNjVhLWZmMjI3ZTQ5OTNmNy8xL0JMdzY2NHN2QzBodVhJd01l
YzZkaldpeGo1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWDwMA0GCSqGSIb3DQEBCwUAA4IBAQBpYDsX
veWDb3Yu/ZSt2UnqchMGCbKO78lsv7HktWJG3OipeYI5jNJXUC9yDa8vTPlhsoCM
K0kw49wGo7KvtniC/b2VuuB+8qkXFB0Ck8BLUXpk0jbn3wvZlqRuBZOYB5p2X1H1
5gd6lSK2A0VYSIlwhJUg4+ShNeJVrjCxEZEvjK4LezL1RT4nHZSUlwqMjVo1u09V
YFaMEIlCFlU2i66XPf6exVMSaYj7b+3Z+UDhygbeKxRwYi0hU7F5pJdO3inLrCME
12wmysjYAYn/YE5w1jZBBqLZDwjMPGaQXw09vSaIyl1eA5EsPnbXA6zcIuOf0XaC
/6sdYDACvfCTnHtY
-----END CERTIFICATE-----
Generated at Fri May 3 01:35:26 2024 by rpki-client on console-ams.rpki-client.org