Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
File: BMWTwzo9oilIzOIyis8F2YoB8aU.cer (raw, json)
Hash identifier: mT8nBQdGpJ61ODfNwFqqCvp6oNod8QPRHPqch4hKqQg=
Subject key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCFCED6C59FDC7B43FF51D3DC45782
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216348
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:fc:ed:6c:59:fd:c7:b4:3f:f5:1d:3d:c4:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:ac:05:59:ba:fa:06:2b:1c:2f:89:cd:fc:
c0:55:a5:ba:bc:3a:d1:8b:93:e2:8c:9f:4d:4c:59:
3e:df:44:f2:f5:49:9a:64:67:40:bd:33:45:d3:c7:
a0:0a:d2:11:a0:a1:57:bb:7c:c4:6d:86:99:66:fd:
cc:b5:ec:01:e8:b2:32:fa:60:d7:32:61:d4:c2:a3:
36:ba:54:dd:78:b9:d7:71:82:de:45:95:48:2a:da:
3b:78:39:35:3f:c0:30:5d:46:35:a4:60:04:2b:2f:
2c:72:04:86:09:cd:25:8a:59:6f:e8:a5:c3:ff:c7:
1b:2f:9c:5b:c0:db:8b:12:59:d0:0d:52:4b:5b:72:
e6:e8:87:12:24:73:26:22:03:1e:0c:0f:49:53:18:
62:9a:01:6b:f5:46:c6:d7:c7:92:81:29:3e:d7:24:
30:f3:1a:f4:a4:43:89:fd:8a:e0:ff:67:f1:b9:f3:
87:f8:f3:a7:2c:49:e9:f9:c6:b3:8c:d5:7c:4c:fa:
39:c3:5e:3a:3f:5e:cf:fa:25:9e:48:09:1e:b0:72:
53:98:ea:56:12:82:49:0a:48:96:67:2e:43:25:bd:
c0:b8:95:cb:20:97:45:7f:1c:c7:7a:27:27:7b:68:
34:75:73:6e:e6:45:5e:26:6b:7c:2a:bb:ce:57:7a:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216348
Signature Algorithm: sha256WithRSAEncryption
73:36:1a:91:56:46:41:7a:6c:1e:3a:68:3b:3a:4d:d2:94:16:
f2:1d:cf:5c:52:4d:81:b9:f3:d7:31:d8:fd:3d:e7:e6:85:5c:
dc:d6:af:98:47:20:83:cb:78:f3:8a:f8:f0:f6:be:72:4d:a9:
97:22:73:9f:72:fa:32:d2:97:d7:bb:cb:03:1b:d7:5e:9c:dd:
ea:b0:e8:e7:77:1b:3d:0d:88:72:c8:90:4e:56:74:50:55:0d:
13:e7:5f:ef:8e:cc:27:f6:7e:c8:5a:d5:1c:20:88:e0:e8:0e:
8b:e0:b6:70:f0:0b:92:ef:30:97:11:09:82:b8:f9:04:01:25:
7a:65:06:13:0a:0f:aa:3f:0a:ae:f4:95:3f:e5:60:1d:e8:6b:
c4:40:db:21:74:5b:5b:be:ba:f1:aa:fb:d3:bf:75:1c:e8:47:
ff:63:cb:db:2d:26:dc:19:89:34:f0:ef:e7:dd:c4:18:4b:f9:
59:69:c2:f1:c7:40:df:e5:f0:cb:cf:f5:00:42:a6:5e:fd:1e:
3d:79:0d:c5:da:36:a1:85:d7:e8:4d:49:c2:4a:34:35:93:2e:
0c:8b:eb:52:e0:5e:4d:1f:bd:8b:0c:fa:ce:ef:f3:a2:4d:13:
53:e9:80:4f:b8:ef:9a:79:ee:24:89:2e:49:6e:8b:92:45:18:
23:e4:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:00:35 2024 by rpki-client on console-fra.rpki-client.org