Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.cer (raw, json)
Hash identifier: ErV26wkR8zDhtNhaeCIiQNRcqDGfWtfIYHQ3CA2K8Wo=
Subject key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D43C5ACAB41758B1A36EF826D1FC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.163.108.0/24
IP: 2a10:b940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:43:c5:ac:ab:41:75:8b:1a:36:ef:82:6d:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=058737ac1bca8c1428b3969546f1974f0694e400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:7f:ab:e0:2a:71:6d:4d:11:08:b4:53:17:
d8:6e:84:2a:96:80:32:3e:21:f4:df:17:41:b4:33:
9a:d2:68:b2:39:85:7d:06:71:c7:82:7d:0a:8c:7c:
6a:e9:7b:be:84:92:57:60:19:3a:5d:99:88:27:7f:
f7:57:8d:a1:83:67:40:af:7b:af:bf:b6:1b:01:48:
10:ed:77:d3:ed:ad:3a:cf:c0:58:e4:f2:05:e7:02:
96:af:7c:38:b0:97:95:9f:83:65:a0:98:94:72:d2:
d6:23:8b:77:a0:a3:66:d5:20:6a:74:68:e4:12:fb:
c5:9e:3e:30:d6:eb:96:a1:65:33:9e:9f:42:97:0a:
69:f7:2e:a5:9e:a8:ac:87:b3:27:9a:dc:12:65:79:
86:20:a1:ef:0a:f1:31:c3:e3:7e:db:e5:20:e3:f0:
5b:2b:76:0e:39:0f:eb:a8:1a:74:99:ac:03:99:ef:
a7:e0:43:de:9c:c9:bb:49:f9:97:39:a1:1a:7c:14:
1a:63:eb:ac:c7:b8:7a:f7:9f:4a:08:91:db:ce:3d:
4c:bc:b8:7c:c6:54:69:5b:02:19:6e:42:11:57:f7:
f5:c1:f1:4f:1d:92:4e:1c:b1:d0:92:a7:84:db:49:
9b:04:54:a1:3f:65:9e:e7:90:cc:ea:f3:11:bf:aa:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.108.0/24
IPv6:
2a10:b940::/29
Signature Algorithm: sha256WithRSAEncryption
a9:90:e8:ce:3b:ab:39:38:53:f2:1a:9b:ab:af:e2:e2:2b:ba:
b5:7b:73:82:10:71:3c:67:57:5d:f6:de:3e:98:e8:34:ce:46:
de:18:9b:63:71:9a:9f:20:49:ca:ad:15:58:8c:39:d7:cc:9e:
02:40:b5:00:cd:e0:1b:6c:95:b9:18:a3:e6:42:81:23:11:23:
ae:f6:f8:14:a6:fa:56:60:f2:6e:75:63:ea:27:5b:fe:66:79:
8c:08:17:5f:a2:1f:a1:28:b4:82:96:53:85:b2:72:e7:bb:20:
56:d4:30:76:d1:b4:e7:21:70:90:f1:99:69:1c:0c:c2:7e:32:
84:a7:d7:66:9f:e1:18:4b:c2:a3:5e:f8:c6:c1:c3:72:aa:28:
12:59:20:7f:99:47:f6:53:7d:44:a3:19:c1:25:4a:c0:fa:ea:
a9:a5:60:98:f9:86:57:9e:6c:38:ef:84:93:f8:7b:a3:e8:9d:
fd:c9:25:3f:c8:2a:29:82:bb:24:38:00:8d:c4:e4:71:33:1c:
f5:ce:a7:7b:4b:75:97:88:02:e4:45:9f:98:cd:c4:b1:e0:65:
4b:7b:10:c9:5c:67:8b:74:ee:83:d5:c8:33:59:f2:68:7b:90:
fa:f3:97:24:8a:a4:a7:c1:25:9f:d6:3b:9f:34:2f:17:de:f6:
c3:43:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:17:03 2024 by rpki-client on console-ams.rpki-client.org