Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.cer (raw, json)
Hash identifier: /yQZ0otVCoREqA4PRFFJLGCGDs6C3mCwp2rpgAJmCqQ=
Subject key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E565C983BA4BE5E4061DF4D1C3CBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56327
AS: 205322
IP: 185.219.224.0/22
IP: 185.248.72.0/22
IP: 2a0f:78c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:56:5c:98:3b:a4:be:5e:40:61:df:4d:1c:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06785117986adaa437bec30a2bf9f157a9257df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9e:0e:94:35:eb:27:d7:9e:bf:f1:5b:27:94:
a6:dd:a8:c7:fd:c0:4e:97:21:1a:68:89:c2:aa:33:
df:93:4c:cd:d6:a8:22:f5:54:08:bc:55:be:3e:de:
61:e9:65:b1:ad:00:93:b6:44:de:05:fb:bf:2d:18:
34:aa:86:c1:f6:77:44:4b:40:e9:1f:5b:8c:46:b5:
4a:50:d2:a7:69:ae:a1:28:d8:3c:fe:ae:7c:7a:26:
b0:89:9a:bc:bc:5f:c5:95:0c:6c:44:21:31:c9:90:
af:f4:42:99:cc:0b:f9:2b:87:3e:14:7c:0c:ed:e3:
8c:1a:6b:e2:6e:61:b1:ae:6d:e2:97:37:3c:46:1a:
71:31:ad:ef:c4:5c:8e:4a:e8:90:4b:2b:98:b6:c7:
e3:93:09:3d:23:3d:a3:4e:af:95:98:1d:2f:96:b0:
ef:a6:e8:9e:aa:e2:2a:bb:53:0e:4e:3d:6d:f9:6d:
a2:f8:b0:68:9c:d1:3f:1f:af:31:ca:1d:ad:d1:cc:
98:9c:ac:8d:eb:98:ab:de:6e:69:22:a7:8f:f6:8d:
b9:5a:9f:dc:6f:80:38:fd:b3:be:a6:cc:22:88:00:
88:91:a9:52:8c:da:11:32:0f:c2:8e:2a:c4:22:75:
5c:e9:fb:b7:56:e2:2a:fc:8e:61:b2:5c:cd:17:6a:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.224.0/22
185.248.72.0/22
IPv6:
2a0f:78c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56327
205322
Signature Algorithm: sha256WithRSAEncryption
83:0d:e8:a7:0b:32:32:61:26:61:06:d4:49:d2:d7:a4:b1:e7:
02:93:54:d9:04:6d:d5:3f:85:01:91:d5:89:08:a8:47:79:92:
0c:46:f0:e6:6f:a7:58:b7:99:c1:2c:af:18:a5:11:47:15:63:
07:77:e7:d9:e3:72:15:99:8e:1f:3f:30:c1:c9:75:ae:0d:fa:
1a:fd:be:40:90:2d:ce:cf:17:9d:64:fc:92:9a:12:3c:50:10:
c7:60:bd:49:08:b9:77:2a:3b:a2:f4:5f:70:c7:76:b1:c5:24:
57:f7:82:c1:2b:cb:a9:da:2e:05:65:14:c8:cf:01:8e:b3:17:
61:28:90:ff:f9:f5:32:af:4e:8b:f7:86:1d:7c:6c:97:d9:45:
b8:34:a1:46:b4:81:c6:2b:f0:5c:3d:ee:63:96:7c:c4:92:1f:
a8:18:47:30:f7:fd:78:8b:d3:1f:f4:fa:a2:8c:3d:53:84:4f:
42:db:32:2b:d6:0e:3d:0d:f2:e5:fb:a0:ed:96:1d:14:36:64:
d3:89:6b:9b:e8:7c:95:7b:cb:66:88:32:78:89:90:9d:5f:07:
d9:87:e2:eb:d5:9b:6e:c1:62:25:00:12:aa:7b:f9:05:66:f1:
fd:ca:b1:da:da:7d:ad:c4:71:bd:47:e1:c3:c0:d0:05:9a:fc:
5c:d8:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:25:14 2024 by rpki-client on console-ams.rpki-client.org