Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.cer (raw, json)
Hash identifier: Ns4MIFWWibplP38yd7/uqMuv5YafMUkOmfWkEqZIa4w=
Subject key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D614828606804A6612D5AE294383E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 161.41.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:61:48:28:60:68:04:a6:61:2d:5a:e2:94:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:9a:81:8b:08:39:c5:d5:b0:9a:00:a7:8d:
c3:32:9f:c9:7c:5a:c6:26:de:15:79:ba:1b:98:fe:
60:fa:55:65:e9:86:62:23:9b:62:fd:94:a9:c9:0c:
30:40:97:42:66:2d:b0:45:d1:fb:6c:8c:6f:cf:1d:
4c:38:a6:0f:10:d1:c4:83:eb:a6:ae:01:0d:07:d4:
9a:2f:f6:95:92:6a:b9:17:87:f7:32:72:5f:3b:ba:
64:b0:56:93:c0:f0:c9:8b:10:2c:87:f6:5e:a9:c9:
3c:c5:d5:81:af:8f:b4:95:bf:7c:b9:b4:1f:56:6d:
25:b1:f8:bd:90:c1:4c:b6:5c:70:32:df:0a:58:4f:
e5:77:c4:60:20:b8:9c:80:6f:1e:98:46:a7:31:d6:
02:6b:b8:fa:1a:6c:52:50:10:7f:05:c2:43:5e:cb:
d1:d6:5a:d4:57:09:88:52:c8:7e:5c:29:5e:6a:e2:
b1:a5:aa:b3:66:63:6f:4a:5b:52:3f:5d:0f:79:16:
f7:18:2f:77:c4:85:f2:1c:16:b0:e5:70:23:b0:d0:
41:5a:ac:1b:fe:5f:07:80:2e:77:75:72:58:a8:5b:
e7:de:2f:c0:5e:dc:43:63:2b:04:a5:23:14:67:04:
0b:0a:ff:e7:90:da:ec:54:75:0a:7c:73:b7:f5:bf:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:08:57:69:00:a8:93:04:b1:dd:99:f5:d0:92:62:0d:26:07:
20:d2:f9:03:7b:49:3e:fe:a2:e6:ec:f7:d8:c8:8a:fe:7d:99:
4d:e8:66:1c:a5:21:b2:4b:d2:e1:98:ac:3b:a5:4f:e5:ed:2c:
62:3e:c5:55:ea:32:10:1c:db:1a:aa:51:59:7f:1f:f2:63:e3:
97:4e:3b:db:b6:de:f5:58:d2:94:08:a5:70:c8:91:8c:00:1b:
c3:f5:70:30:11:c4:51:0d:b5:51:f4:3c:b6:c2:b3:9b:7a:75:
ed:a6:0c:a9:4a:c5:93:f3:48:d6:61:0a:5c:e9:22:83:82:65:
2d:e2:18:d9:d3:91:77:a1:7a:9e:2a:3e:f1:9f:9c:0d:05:d2:
2a:8a:af:86:d4:72:fa:ac:0d:4a:ec:26:99:2a:11:90:03:67:
04:70:8f:a7:a4:a3:6f:e2:eb:f3:ff:a3:a2:5d:07:db:de:12:
9b:6c:50:b9:d4:05:bd:9a:c8:93:dc:88:ed:e1:5a:69:cd:b2:
d6:dd:ec:3c:9c:9d:d2:1b:24:12:bc:d3:31:5d:9e:9d:95:d6:
b3:1a:33:dc:e8:7b:98:bd:d9:b9:5f:dc:95:e5:7e:94:96:6d:
9c:b5:98:40:95:ea:6e:f8:2d:d2:5f:ec:7a:28:b4:fc:97:13:
fb:45:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:10:46 2024 by rpki-client on console-fra.rpki-client.org