Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer (raw, json)
Hash identifier: Z+DLbB3jQ1N+BLfSfbNkCAQ9sTxG0+r+1MJP/Ii2Swo=
Subject key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BA804D8721BF4CEF894A182C3638
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.67.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ba:80:4d:87:21:bf:4c:ef:89:4a:18:2c:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:62:a3:c8:de:2c:ee:ed:56:4e:d3:bb:b6:
9a:36:29:e6:f1:05:d4:f7:57:83:6c:05:94:46:48:
a0:ee:b9:d0:be:a1:c6:8e:ab:56:2e:20:a5:3b:59:
0e:97:32:10:69:e8:8d:09:01:5f:71:d8:10:75:a0:
8e:0c:84:98:a1:1a:48:ef:f7:0e:1f:4f:19:09:3d:
e3:13:4e:83:6a:c2:f9:f8:2c:b6:88:0e:4c:b7:e3:
44:18:cc:b8:7e:5c:46:12:02:98:aa:18:4c:86:a4:
0f:76:d4:84:71:cf:f3:d2:4c:9e:a9:34:bf:cf:8a:
c4:5a:17:15:a4:5b:89:b5:2f:f8:ae:0c:c7:fb:24:
6b:5a:4a:90:15:0c:35:28:3b:6e:f2:a6:75:b3:71:
0f:53:16:9e:14:ce:b0:d8:64:c7:e1:59:fa:e6:63:
87:b2:5e:9a:1f:c8:dc:ee:55:aa:29:d9:f3:7d:ca:
5b:f5:c4:b2:4e:32:a8:4e:ff:7c:56:86:3b:4e:81:
56:40:5a:eb:ea:90:28:be:b9:55:df:16:47:10:36:
d1:4a:84:d0:83:7e:e0:6b:55:1c:7a:16:ec:7f:de:
18:1c:44:65:be:2d:bb:e7:0d:74:13:d8:40:cb:b8:
a4:ee:ec:c3:39:e9:bb:2a:70:7a:01:e2:dd:2d:f7:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
34:ef:1c:24:ff:c4:28:88:96:29:fa:17:eb:d0:61:9a:b9:f6:
db:ef:0c:4e:82:3d:45:17:9d:61:f3:5f:f4:a1:7a:76:22:1b:
7c:60:7c:c7:40:97:3d:a0:9a:32:b0:c9:27:9d:8a:9d:62:83:
33:06:58:db:c2:1d:64:7e:8c:85:d3:37:1c:8b:09:6b:14:61:
11:99:ce:6c:f8:9e:bf:fd:1a:8c:71:ce:72:4a:91:1e:a3:d0:
bd:6e:31:92:51:94:bb:8a:f2:8b:fb:6c:0b:40:0a:96:53:45:
52:82:78:dc:53:a7:fe:68:fa:23:a0:67:05:34:6a:29:2e:72:
d3:27:dd:05:29:c7:c4:df:55:9f:3b:a2:f4:4b:39:23:d7:2d:
70:7a:4d:2f:58:00:aa:12:f1:91:72:5a:16:9d:36:cb:a0:d9:
88:2b:fa:56:73:82:fb:67:dd:79:79:b5:b1:49:57:f1:29:fc:
75:11:9b:f4:b5:86:f7:3e:54:83:17:a2:c9:45:67:cb:8a:5c:
92:52:6d:90:80:d1:6b:62:50:02:a2:04:26:7b:f6:39:ba:40:
98:1d:3a:0f:23:31:cc:19:f9:f9:a9:4d:ac:a2:c7:3b:72:f0:
66:af:30:67:bf:05:41:59:f9:fd:1d:fb:05:9e:e7:14:f1:b5:
95:3d:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:55:43 2024 by rpki-client on console-fra.rpki-client.org