Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
File: BT6UUB8P0s3qPC57RjGObn9RX3M.cer (raw, json)
Hash identifier: P+HZ0OvcE4lQ/R5WdyFdiZUHHmTehlTsnKytU+94fkA=
Subject key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01933F3D457A4DEF5F444F288C88BB8D46FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Nov 2024 12:26:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6735
AS: 13101
IP: 82.97.128.0/18
IP: 86.103.0.0/16
IP: 176.119.214.0/24
IP: 185.118.20.0/22
IP: 194.88.160.0/19
IP: 213.158.96.0/19
IP: 213.178.64.0/19
IP: 217.70.192.0/20
IP: 2a00:12d0::/29
IP: 2a03:c140::/29
IP: 2a05:e140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:3d:45:7a:4d:ef:5f:44:4f:28:8c:88:bb:8d:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 18 12:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:2e:17:95:20:3c:c1:62:19:73:9b:53:de:
ec:b6:75:15:cc:2a:bc:4e:87:70:18:73:6c:74:b7:
00:87:1a:69:df:9b:28:d2:33:45:6e:fd:c5:b4:79:
58:1e:56:cf:cc:81:8f:ab:9c:0c:1c:97:04:82:99:
ba:29:07:18:ce:89:33:f3:44:48:06:ed:9f:d8:32:
fc:b4:23:8d:b3:2b:38:2e:91:e2:01:98:43:00:a2:
83:76:59:06:4e:39:0e:2a:a5:de:31:5d:6d:55:41:
37:d8:13:05:6c:29:83:93:43:fc:46:4c:1b:70:f2:
7b:79:ea:e6:d1:6e:70:5c:0f:d2:0c:a4:12:6f:08:
dd:c5:bb:cd:a8:5d:2b:76:30:52:d2:2e:be:a1:7b:
f6:05:60:aa:bf:90:b0:84:ca:49:af:ae:57:d0:44:
72:dc:42:80:c3:75:3c:9c:55:ed:bc:96:d6:9b:83:
27:e9:0e:05:a2:c9:70:04:15:6f:5a:88:48:39:0d:
81:de:d8:93:64:9a:44:0a:28:cf:2a:40:d4:74:a9:
87:a7:66:73:2f:8f:60:bb:2f:f2:cd:29:ad:be:b5:
bd:62:e3:e5:f1:f3:47:37:51:cb:e6:dd:ec:98:1c:
3e:da:69:28:78:59:93:0c:2d:9c:7d:9d:37:83:b1:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.128.0/18
86.103.0.0/16
176.119.214.0/24
185.118.20.0/22
194.88.160.0/19
213.158.96.0/19
213.178.64.0/19
217.70.192.0/20
IPv6:
2a00:12d0::/29
2a03:c140::/29
2a05:e140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6735
13101
Signature Algorithm: sha256WithRSAEncryption
44:2c:ce:50:b1:0a:08:18:cb:75:7a:b2:34:f5:81:2c:cf:07:
33:a4:38:80:de:9b:9d:21:e1:04:f6:42:25:c5:1f:03:b5:aa:
fa:b5:a1:08:ea:1c:01:85:a0:33:5b:ef:13:38:fc:04:a7:59:
ab:60:af:f7:b2:06:9c:64:7a:09:93:de:59:8c:2d:ea:63:b1:
7c:08:6c:6f:10:63:b1:ec:7b:b5:80:0d:13:bf:82:9c:7d:ac:
6b:51:7b:5e:37:2d:2d:70:53:fd:fc:d9:5f:f3:4d:b3:2a:92:
0b:07:9e:45:c9:2c:4f:96:89:83:fc:a9:ed:0f:6d:56:f0:8e:
20:6a:77:4f:fc:74:98:c0:e5:62:f8:b5:70:4f:61:3a:a6:62:
9b:4f:fc:87:8e:67:ef:2d:3c:e0:bf:38:b7:4c:d1:b0:49:c5:
7e:ee:ac:40:ef:d0:e8:8c:37:62:01:ca:65:bf:f8:c5:ca:4f:
4e:e6:d9:d6:32:af:03:fa:f5:70:dd:80:71:43:44:b6:f9:28:
04:fd:5a:4f:44:56:76:31:b5:83:32:b2:3d:fb:b0:51:d2:bf:
e0:f8:24:f3:14:11:a0:24:4d:4b:70:97:26:3c:da:04:19:ed:
ef:25:af:d2:52:b6:f1:6d:31:e1:9c:63:4d:08:e7:84:04:07:
7e:b8:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:52 2024 by rpki-client on console-fra.rpki-client.org