Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.cer (raw, json)
Hash identifier: siBdjzhZLP08nG5nmvYb0VUkCw+8msJCwpSFoNsfNkQ=
Subject key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4B729EC8C7D31D2A2540509EB128
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.235.60.0/22
IP: 195.238.234.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4b:72:9e:c8:c7:d3:1d:2a:25:40:50:9e:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:12:ef:20:76:a5:04:c4:0c:4e:cc:71:80:
c1:2a:59:6d:cf:97:87:5b:71:3e:50:11:d5:98:9e:
29:92:35:0f:09:e8:2f:c3:d6:ca:cf:09:1f:9e:59:
13:84:fe:32:85:dd:bf:a1:39:1c:b7:ec:e1:fc:97:
e5:5a:ba:d6:3c:e2:e1:df:e6:23:b6:c2:8f:5b:ef:
64:75:76:6c:c1:5c:93:f0:2c:fd:78:4c:bd:12:b2:
42:69:35:b3:f0:21:18:22:89:73:88:34:80:55:73:
f1:18:5f:64:bb:f5:65:e6:27:1e:4a:e6:25:be:56:
24:85:c9:20:65:34:4c:12:67:3a:c9:65:6f:30:0e:
a1:e0:21:a0:60:2b:f2:4b:c7:22:ec:54:99:e9:2a:
91:dc:3e:8a:27:02:af:28:1f:d1:54:7a:c1:54:1d:
ac:26:4e:e9:33:64:f0:f3:25:28:fa:d5:30:be:09:
25:3f:bc:89:c2:4e:19:41:6c:c3:c9:7f:eb:85:da:
94:7d:be:71:31:12:49:b4:e0:9f:d1:d0:00:f1:d7:
e9:3b:91:b1:13:f4:19:32:73:db:0e:54:ba:33:99:
05:db:c3:8c:ff:e4:46:ea:57:68:f6:d5:49:90:a7:
d9:36:a0:81:5d:32:77:40:33:c8:68:73:37:5d:fc:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:da:b6:62:b6:8a:41:50:09:c9:15:d8:43:a0:4a:14:f4:07:
78:c1:82:94:1b:ff:bb:58:cd:dd:64:a9:0d:dd:e5:95:9e:ce:
7b:47:f6:04:1b:db:34:b7:0f:88:9e:96:40:1d:84:ad:d0:75:
2e:e1:2f:52:7b:59:bf:8b:80:c2:70:8a:c1:88:21:a1:47:bc:
95:25:c2:8a:c7:a2:ff:59:11:c0:b5:b5:bd:1b:11:a8:d4:0d:
38:79:db:d9:07:66:f2:44:81:d6:f8:cc:e5:94:3b:6a:50:cb:
3b:b4:1a:6e:46:06:f4:57:a0:cd:aa:60:d6:e6:92:15:75:31:
72:de:ac:e0:d4:d0:e3:43:cb:4d:11:fe:29:e1:03:73:71:ee:
43:b9:90:24:db:b1:61:ac:53:e8:34:87:4c:4c:f3:23:15:dd:
ad:61:ae:8e:c3:64:31:b7:46:a3:02:2d:ac:eb:b0:76:87:40:
53:cf:cc:22:bb:b3:5d:67:27:63:2a:ef:d1:32:3b:00:35:ce:
13:49:8d:86:5a:30:eb:93:a4:83:58:a4:c3:f7:8d:d0:e8:63:
30:12:6e:8a:b5:eb:71:ed:d4:b1:f5:78:ce:ae:96:17:88:90:
12:89:5d:b1:61:7a:ce:5d:cb:db:fa:54:82:49:31:31:a8:6a:
a4:2d:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:39:39 2024 by rpki-client on console-fra.rpki-client.org