Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.cer (raw, json)
Hash identifier: RmLyAlgsJo3EJEkKcW+VKq/zXV935L9lSUQXMuimTQA=
Subject key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50136ECB6437765C11CD8F71BD42722
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.15.8.0/22
IP: 2a02:fb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:36:ec:b6:43:77:65:c1:1c:d8:f7:1b:d4:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:8a:66:d7:11:d2:b8:a5:df:13:e7:42:39:
9a:44:88:fc:f2:ad:83:ee:5a:45:f9:1f:12:67:53:
fb:de:17:67:46:7c:0d:0a:4a:70:c6:34:6b:cc:e9:
8d:02:87:ef:ca:56:3e:f2:4f:4e:af:39:f2:ff:72:
df:51:bb:8f:fa:93:a0:e4:56:07:f6:bb:96:21:a4:
1d:83:1f:9d:2e:3b:36:00:dd:ad:fd:08:b0:5d:dd:
4d:fd:e5:86:5c:4a:0f:9f:12:87:86:8a:f1:5e:bf:
6b:61:2c:d8:42:18:31:ad:d4:5b:4b:ed:ae:e8:60:
bb:67:05:2f:be:e1:58:7d:e1:19:eb:5f:32:39:ad:
0c:f5:bb:4d:bb:81:5b:59:b5:5b:81:ad:30:4f:90:
45:06:21:22:6e:60:44:b9:ab:2e:dd:62:c9:46:1e:
9d:b1:40:90:bd:29:9d:fd:30:ea:25:4b:a0:88:80:
c9:0c:ed:62:2e:4b:62:f5:d6:74:b5:a5:22:30:00:
ae:30:d1:e5:30:45:cc:de:c0:73:54:3d:ce:e5:ab:
50:90:19:ca:f4:1a:d5:db:2d:1b:7a:2d:5a:5c:08:
88:85:95:7b:c3:c5:92:fa:b9:f9:06:3f:47:68:2b:
43:81:75:b6:2a:40:dd:9a:43:90:0a:69:21:24:64:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.8.0/22
IPv6:
2a02:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
18:80:22:ef:09:4d:42:4c:6b:30:25:52:7b:2c:4b:79:42:87:
41:78:5f:1d:8d:e6:56:fe:9e:60:67:5f:82:4f:8d:81:99:7a:
c5:52:5c:c0:2d:c1:65:b8:67:d8:4d:c3:8b:18:e9:cc:78:a7:
94:a5:9c:0a:02:e4:28:58:ec:8f:34:a7:55:f1:31:bf:2a:96:
84:cd:de:be:1b:d2:db:ea:66:5e:ca:57:f7:9d:5d:9e:b6:ba:
97:63:5c:45:63:2e:65:b7:0c:dc:8c:eb:35:d4:90:e5:48:59:
ce:e7:a3:c8:c8:42:96:cb:30:5f:62:c3:8f:9e:83:c6:56:cf:
92:77:75:88:0a:00:7a:2f:31:fd:fd:bb:2f:23:3a:24:7e:bd:
ab:0d:15:19:01:e5:85:d3:79:0e:47:1f:dd:63:99:e9:fc:bb:
a4:86:ee:d2:1e:b6:77:2b:71:2d:ea:3e:0a:5a:61:0f:7a:40:
46:be:fc:86:63:b5:f3:df:14:7c:d4:e9:2c:2b:21:7b:24:1c:
f7:7d:36:55:05:f9:f8:48:6f:ec:22:25:2e:72:23:6a:a9:54:
3a:64:02:ca:1e:ea:34:71:1f:9f:c7:9a:8f:b5:d9:24:d2:c8:
d9:dc:64:80:05:e9:1a:50:e3:ed:83:1a:a4:e0:75:7e:ce:72:
53:1c:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:10:53 2024 by rpki-client on console-fra.rpki-client.org