Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
File: BlpHDbq5wcM08PhfQXzRqkJenxM.cer (raw, json)
Hash identifier: g5jgC5KxFllHTxcn1GBiIQQmrsHtHXzcLGGNmwAN8tI=
Subject key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019078B4C2A4055FD1DB4E2DCE47E85A6E0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jul 2024 13:07:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.66.101.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:b4:c2:a4:05:5f:d1:db:4e:2d:ce:47:e8:5a:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 3 13:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:da:08:eb:80:00:0f:9e:f2:4a:33:60:53:
b4:ff:74:f7:b4:60:31:9e:2d:85:e8:80:53:fd:77:
24:b9:05:39:c5:49:b9:ce:71:08:37:5b:e4:43:2d:
69:3f:ca:86:37:14:36:f1:1c:46:f3:af:78:43:4f:
78:fb:6d:8e:89:2e:c4:38:f6:63:38:d9:53:16:a4:
bc:2a:9c:1c:82:06:e2:3a:c0:56:ce:e1:9a:67:ec:
af:23:75:f1:c2:34:11:69:50:33:63:00:e4:68:b2:
bf:1a:c8:e4:5e:06:b7:01:ba:79:07:36:ae:db:cd:
eb:a5:12:c3:28:a7:d5:ba:05:a8:89:9c:6f:0b:5e:
c3:38:f6:2e:0e:4f:a0:9f:52:09:29:1b:ff:f9:49:
d6:41:97:32:35:d4:52:12:d2:9c:37:45:7d:86:0b:
10:16:85:ec:e3:d3:f6:a8:8f:83:42:2c:ef:f2:12:
fb:47:53:e3:43:32:48:43:ea:84:06:0a:e1:12:f8:
f1:4a:d4:ce:6f:1f:e9:24:6b:09:49:42:ee:96:b2:
45:5d:a1:27:8b:b6:6d:a7:b1:35:bf:8d:6a:70:d3:
aa:60:8e:a3:d5:a5:a9:88:b5:48:3e:2d:7d:31:af:
af:94:51:bc:21:70:83:d5:83:cb:35:24:4d:dd:8c:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e2:eb:26:5c:28:22:2e:43:02:04:51:fe:72:59:bc:52:26:
c2:65:76:45:a1:3a:70:d0:c2:d2:22:0a:7e:69:1c:57:b9:1e:
59:52:39:77:98:57:1c:5d:4f:9f:d2:a6:d5:d5:ec:76:8d:d1:
b4:0d:42:39:ee:1e:d8:f9:46:6d:23:91:7c:81:0f:ae:86:37:
3f:23:c7:a5:8d:c6:84:e7:28:98:6a:94:6e:2a:b0:41:14:73:
91:b5:85:88:57:e9:37:d9:b5:0e:e6:75:ae:1f:46:a1:f6:22:
b0:c5:c3:a5:98:94:87:06:74:cd:49:14:1c:68:56:9f:53:1c:
bd:29:8a:dd:54:44:cb:2f:8c:4c:c2:f2:e1:21:fa:ff:90:36:
65:e5:a5:ab:16:2f:2d:3c:34:9f:cc:c0:53:3e:f4:21:d5:e3:
67:d5:e2:16:c3:b1:fc:e9:8c:22:23:b6:ba:f1:65:6e:51:55:
cf:0e:c1:fa:a6:5c:02:28:d3:86:0b:a2:5e:b7:e0:87:02:eb:
62:1f:2c:c5:67:14:04:23:dc:09:40:cd:ee:06:7d:46:df:2e:
13:58:9a:4e:15:4c:56:8f:e2:80:10:ff:0e:dd:32:9a:46:46:
bb:26:56:1e:6e:01:39:75:da:84:3e:e8:a0:5c:15:90:d0:e7:
4f:22:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:36:41 2024 by rpki-client on console-fra.rpki-client.org