Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer (raw, json)
Hash identifier: eF3ayZcytGD2z7nLaZV3Mr6Y25GrP/4YHUkd6t8Ll0M=
Subject key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192054A7CB669BC00E9CFEAA8057AC37942
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Sep 2024 13:20:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202730
IP: 185.142.112.0/24
IP: 2a07:2d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:4a:7c:b6:69:bc:00:e9:cf:ea:a8:05:7a:c3:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 13:20:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:6c:06:d9:a2:22:d9:8b:28:71:26:f6:a4:
3c:bc:b4:09:c9:bb:79:60:87:be:66:65:15:32:47:
ef:e4:55:ac:00:7d:b9:53:97:48:b5:98:4a:e9:6b:
d9:16:ff:33:5d:18:f3:d2:e6:a8:f8:20:57:bb:14:
17:49:68:60:cd:3b:43:b5:aa:95:ad:6e:c2:16:9d:
1e:06:e8:c2:d0:44:05:a6:29:11:81:02:34:6f:a0:
8d:ea:2b:1c:09:a8:f3:39:50:94:4f:d2:7e:02:b6:
65:24:bf:a7:c1:37:43:58:d7:8c:72:6b:95:de:fd:
03:dc:dd:a7:11:c6:33:fd:9b:d9:88:04:de:02:70:
79:e9:3a:ed:31:2c:f0:d7:46:fb:a8:c4:d8:f1:e1:
f3:61:0e:bb:d5:69:ac:46:96:49:d8:66:08:d4:ac:
b3:c8:d9:9c:1b:66:6e:ab:a0:df:3d:61:16:c6:6d:
f1:c3:2e:92:60:60:24:15:cf:a5:0c:00:11:3f:1d:
52:0a:a1:6a:77:c2:78:38:4f:9c:81:43:f6:b5:4f:
ed:01:41:d9:64:d9:e1:71:c7:23:d7:03:83:4c:b2:
51:76:ce:1a:b5:43:1b:60:98:19:3f:27:6b:0c:6e:
c3:27:37:28:84:41:d4:73:04:f2:44:47:b5:93:96:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.112.0/24
IPv6:
2a07:2d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202730
Signature Algorithm: sha256WithRSAEncryption
51:78:7f:15:7d:fe:ac:e1:be:53:df:db:4f:a7:9d:3c:34:fb:
31:4d:53:24:03:ca:a6:74:e0:27:81:25:98:66:37:21:9d:2e:
b4:9d:d8:c7:48:4e:25:d2:76:a1:c7:aa:d4:b5:3c:82:c1:99:
76:c9:be:6e:26:6a:57:0b:6c:99:52:5f:3f:75:f2:23:44:96:
e4:d4:35:24:aa:09:d3:00:b9:f5:ea:e2:25:3b:2c:16:fc:c4:
f6:8c:f7:0a:56:55:68:80:b4:73:1a:80:23:f8:e6:fa:20:46:
34:8a:9f:32:30:ed:4f:ab:46:00:d8:3c:7e:ae:9c:00:42:8b:
42:92:c8:6c:64:2d:30:8d:24:8d:69:27:da:f2:ca:7c:80:36:
40:ea:d1:98:b1:82:d0:41:b7:85:ce:2c:8d:6f:d7:16:d0:07:
49:2d:55:9f:40:5f:b5:b6:fe:7a:2b:c3:fa:6e:4c:25:1d:53:
ea:1d:35:9b:89:a6:1b:15:53:95:6b:14:90:5d:19:2a:f3:74:
3c:0b:9e:67:37:e6:a9:c6:cf:cd:7c:fd:18:c2:3c:2c:82:d4:
c8:74:fc:05:24:58:49:6f:46:4a:c9:d4:48:d0:2c:fd:60:6a:
d7:ce:da:c8:36:bc:73:1b:76:e9:69:9e:b0:dd:6c:ce:a5:0d:
53:75:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:01 2024 by rpki-client on console-fra.rpki-client.org