Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer (raw, json)
Hash identifier: 9GVjAhZ0CGma9s7d5adYxOZlAIpbpCdum4uiMEWaJdQ=
Subject key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DA8119811CC91B1986DAC2BD6C793
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47866
IP: 93.158.0.0/18
IP: 185.28.28.0/22
IP: 2a02:2140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a8:11:98:11:cc:91:b1:98:6d:ac:2b:d6:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:8c:3d:e0:5f:7b:96:b9:c2:53:bb:eb:ab:
cd:79:4c:be:98:e8:17:c5:a9:4e:8b:0e:73:39:cf:
46:cb:36:8e:8a:70:1f:38:1d:cb:57:54:01:be:c8:
64:8f:6f:e5:93:11:19:9f:06:c8:ea:2e:aa:71:db:
2a:5d:4f:fd:3a:9b:cc:d1:0c:3c:92:c7:d2:ee:f7:
95:9a:54:7d:18:5c:86:ce:80:3b:f0:ae:a5:da:4b:
55:d3:e8:d2:b2:1e:cc:58:38:0a:8d:5c:0a:01:0d:
cc:c8:d4:30:f1:b3:9f:4c:6b:82:21:8b:b1:06:4e:
2c:d1:34:68:9a:66:4d:73:5c:81:75:00:9b:cc:df:
92:88:20:5a:f9:56:09:76:ce:37:5c:d9:44:5d:83:
0d:98:59:c8:19:86:b9:15:e6:78:f9:82:1f:ff:fe:
fb:69:a3:05:48:1a:a4:7a:08:a9:cc:61:2c:3e:68:
3d:70:52:23:11:1a:91:8e:26:20:fb:f3:aa:48:31:
6f:5c:40:f6:dc:ee:c1:d7:d6:e0:d0:a6:a0:ed:a2:
f5:af:96:65:11:ba:32:e6:9f:8a:29:94:a3:0e:b2:
b5:89:28:96:51:82:a1:06:66:88:65:07:a2:f2:5e:
b8:fe:6f:bf:35:38:21:6a:05:6b:a1:5f:bf:44:b1:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.0.0/18
185.28.28.0/22
IPv6:
2a02:2140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47866
Signature Algorithm: sha256WithRSAEncryption
af:b9:b1:82:48:83:0b:e4:03:3b:4b:62:62:55:51:e8:d5:26:
36:38:57:d3:34:20:51:e0:54:46:60:b8:ec:37:65:51:d6:32:
25:36:3b:c4:81:fc:75:72:f8:eb:57:98:a0:3a:3c:e7:15:ec:
af:05:77:52:7f:d6:4c:df:dc:55:44:76:72:c4:00:20:43:23:
15:0a:c9:80:78:0f:e8:3e:a6:30:44:c9:d9:ba:f2:16:7e:41:
90:93:46:18:1f:82:a9:1c:91:ad:4e:b7:4c:c8:12:b5:93:dc:
1e:77:9c:ee:8e:23:01:43:27:44:87:ba:7c:02:9d:f7:29:0b:
3e:e8:53:a3:d0:b5:77:5b:43:0c:f9:e4:53:4b:6a:2f:ab:3a:
4e:b3:c3:0d:f2:39:c6:aa:a6:26:a9:74:39:c6:90:a4:fa:ae:
6f:99:91:5c:c0:be:1e:c3:35:17:a1:2d:5d:bc:91:87:31:60:
58:11:78:64:08:23:49:36:c7:a3:34:64:5b:6f:fa:bd:c5:2f:
55:b8:80:06:42:a6:9b:84:ea:e1:66:a2:06:47:04:cf:a2:17:
8c:ce:71:9f:6e:46:8b:35:f0:66:15:39:51:25:a2:10:95:30:
6d:0f:2a:08:42:93:f6:ae:0a:5b:ac:08:2f:f5:de:a4:6f:9f:
3f:28:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:26 2024 by rpki-client on console-ams.rpki-client.org