Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer (raw, json)
Hash identifier: ehGsJXvJt5vQGqJqo8+TTYGm5DNTBvO+I0qn0br/xzk=
Subject key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801B1B231A6BE58E204A536919C1A77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31117
AS: 207981
IP: 87.244.192.0/18
IP: 185.171.140.0/22
IP: 212.37.64.0/19
IP: 217.119.112.0/20
IP: 2a01:328::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b1:b2:31:a6:be:58:e2:04:a5:36:91:9c:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:91:92:3e:97:71:ca:78:eb:11:b9:2a:87:
d6:63:aa:d9:59:fe:06:fd:8a:7a:f3:7f:b4:ce:ea:
bb:63:4d:d3:ca:7c:09:e3:7b:c6:da:1c:71:9e:7a:
76:2b:bb:0d:70:6d:3f:46:4c:fa:32:22:a4:ed:b9:
62:b9:4a:0b:df:89:86:3b:7f:14:c9:8d:cd:a7:fc:
5e:7f:f2:f9:71:cd:cf:98:85:24:78:17:79:4f:56:
a7:7a:40:a4:99:0f:44:5d:0d:fe:79:bf:00:c9:49:
36:2c:30:1b:ae:b0:81:e4:ab:e6:64:0c:8f:79:71:
4c:b4:d7:08:89:f7:b1:98:bc:a7:e2:56:c8:24:84:
fc:40:bf:f8:76:03:08:3a:d9:8d:da:a6:94:3e:ef:
ca:91:c7:48:73:57:cd:39:eb:18:ef:6b:e9:b4:61:
f7:2c:af:77:c5:2d:60:f4:ec:3b:fe:5a:64:5a:06:
d5:bf:3a:f5:e9:9c:f4:61:a7:a2:91:0c:bd:0d:b5:
e0:14:1d:62:03:9f:8a:d6:9d:e2:cb:16:94:e5:a8:
d8:b5:ff:22:71:f0:da:51:79:4c:14:74:a1:32:a7:
c3:19:8e:17:f8:de:bc:3f:66:30:78:ab:27:0b:d6:
2e:b7:19:3e:e0:53:09:cf:73:b5:63:ad:58:62:5b:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.192.0/18
185.171.140.0/22
212.37.64.0/19
217.119.112.0/20
IPv6:
2a01:328::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31117
207981
Signature Algorithm: sha256WithRSAEncryption
31:76:a3:5a:e7:92:22:55:79:3d:dc:8c:e5:05:22:3c:a5:20:
d9:87:13:28:e4:4c:2b:53:3d:23:a1:21:69:e2:99:ac:db:6d:
f0:40:10:e6:0a:be:63:af:4a:ef:76:a1:92:bc:fe:c5:60:5b:
d9:56:d9:85:e0:bd:eb:53:84:fc:10:12:fc:be:f7:43:0f:2f:
1e:a8:ad:d7:ae:dd:dc:42:03:54:33:70:a4:a5:93:91:c3:43:
82:c0:0d:d8:82:eb:69:91:8a:9f:18:18:56:65:6c:aa:a0:09:
53:2e:e2:79:25:16:47:ba:2d:0d:d4:fe:84:dd:18:da:3f:6b:
3a:03:94:f1:e5:14:89:bd:70:bd:bd:a0:0a:b5:84:64:b9:be:
59:bf:c7:c6:59:89:60:3c:eb:89:3f:2a:32:d2:25:fd:28:4c:
e7:d7:29:83:71:d4:1f:7c:45:7b:3d:ef:b3:54:17:bc:5d:b4:
6b:5b:a2:05:33:45:8b:b9:fa:5e:c9:28:b6:a9:8c:f6:ef:7c:
34:08:f0:f3:11:18:40:2c:73:4b:38:7d:fc:6f:33:d6:1c:26:
58:5e:5d:4b:74:bb:70:ea:83:fa:e5:da:10:13:8a:ab:3b:16:
9c:b6:43:48:f0:2d:ae:39:d1:64:38:1e:f8:4a:38:ab:36:bf:
6f:03:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:58 2024 by rpki-client on console-fra.rpki-client.org