Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
File: BaCPua9NbK_M-uOyjsbtScQj78Y.cer (raw, json)
Hash identifier: NQ08oy4EMrLOywm+vrg41Q1Yz+QIXa6jPKequxiGum4=
Subject key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9CECA3BBA413527A42D8561A0E23D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211702
IP: 193.163.144.0/24
IP: 2a10:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:ca:3b:ba:41:35:27:a4:2d:85:61:a0:e2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:0d:a0:6e:33:e3:6e:ba:ab:69:a3:83:ca:
d3:ff:58:b8:1a:e9:9d:1c:1b:1d:b6:fd:d8:20:76:
e4:83:df:59:02:e5:dc:7d:ec:32:f1:0d:12:dd:99:
b0:01:dd:ca:32:6b:a6:33:a9:87:d4:81:1b:64:09:
54:49:ba:ac:b3:2e:d1:94:66:e9:ff:1a:06:35:d3:
8a:fe:bc:32:88:d2:bc:32:e4:85:53:70:a9:13:be:
01:fd:fc:d4:dd:26:a6:d4:6a:fc:a3:2c:b4:74:8c:
b7:14:87:8c:37:68:74:a7:27:4e:8b:fd:f2:a5:9a:
59:8d:2f:26:15:98:72:26:6a:72:ec:ee:bc:be:90:
33:6a:ec:67:e9:d1:b2:a0:8e:40:a4:9d:88:c2:c1:
fc:87:cd:27:68:5f:a1:67:4f:b5:05:dc:e6:72:fd:
a8:81:78:6d:c6:91:20:bb:f7:45:b4:8a:ab:5b:07:
a3:0a:3d:f5:10:f8:dc:ac:08:db:db:aa:a1:bc:d9:
03:50:83:12:d6:33:c1:e1:07:b4:27:d9:df:e3:3e:
77:bb:b6:9f:07:08:8b:d8:0c:40:9d:eb:e2:f0:40:
24:6c:40:cf:8a:d3:ef:e8:6e:93:87:b8:df:4e:76:
6c:83:5a:89:30:7f:ca:0b:97:e6:a3:ac:6a:cd:56:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.144.0/24
IPv6:
2a10:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211702
Signature Algorithm: sha256WithRSAEncryption
68:5b:df:d7:66:6b:a3:33:56:67:d5:d6:e7:29:da:c7:cb:87:
77:0a:56:f9:a0:59:99:ba:4c:bb:5c:84:a6:76:6c:cf:66:ca:
31:a2:c8:d7:0c:6d:10:24:55:9b:72:48:13:78:9b:a7:8f:83:
6f:eb:20:61:93:a1:15:65:c6:ff:9d:77:e1:45:df:f1:3c:62:
03:b7:99:44:ec:99:93:09:51:7a:66:b9:a8:54:60:aa:46:84:
3d:50:f9:fb:41:02:48:2e:5c:48:1f:a2:0a:c9:96:83:b1:a6:
06:31:51:9b:72:c7:5f:c7:a8:29:f8:bd:d8:09:7a:60:5a:77:
16:fb:bf:15:22:7b:28:75:96:c7:73:6f:a8:9a:9c:9f:cb:2d:
03:c0:41:fb:b9:fc:f9:d9:fa:ca:44:5d:7a:e7:13:13:8a:50:
0b:07:78:fc:9a:03:33:ac:88:e3:0f:42:5f:4e:ff:c3:6d:01:
dc:3f:7d:b2:d3:ea:fd:55:a3:a8:a0:47:b8:e2:21:02:21:da:
d8:87:e5:5a:ac:a8:1d:dd:77:ba:a4:23:4f:e8:01:04:51:31:
24:1f:f1:3e:0f:ed:20:1e:e8:79:01:f8:e5:11:72:1a:8e:5b:
f1:92:a6:46:c5:c8:5e:39:2a:64:d6:ba:5d:2c:fc:98:45:50:
d0:77:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:37 2025 by rpki-client