Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer (raw, json)
Hash identifier: PLeDlYZ6aHIGTWvOoJ/YlRtomMfsqFuA0w2lbyA/f1Y=
Subject key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CEF8D30835D623EDE0284F363F61A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.217.128.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ef:8d:30:83:5d:62:3e:de:02:84:f3:63:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06a757442e47f82608bef423dac344c25358dbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:b8:5b:44:10:f1:fb:72:04:54:ab:d3:34:
2d:8d:90:ca:41:6b:98:b3:e4:d5:4c:c9:27:1d:d6:
20:b4:1e:21:df:3c:79:78:66:d3:bd:76:78:c7:e6:
8e:50:62:80:86:a1:16:56:98:bb:a2:b8:aa:06:09:
69:b1:f1:f5:21:f7:9f:70:34:a0:3c:d7:ed:e4:61:
b9:4b:e6:0a:2e:77:79:eb:62:28:87:64:c1:46:ed:
31:10:e8:ee:5e:22:15:05:5f:25:b7:ea:b4:61:33:
aa:d7:8b:af:1f:76:92:af:20:53:6d:f7:20:25:c4:
70:ab:90:16:68:51:e6:02:40:7c:1c:63:aa:af:2e:
b4:da:94:a5:de:25:80:09:ac:b5:76:a2:e6:61:30:
0c:55:2b:dd:ab:68:4b:1d:4d:52:a8:5f:ac:78:f1:
b8:30:5e:44:83:74:23:fe:0c:2a:97:1d:9b:c1:3e:
5a:3c:41:a9:2c:c5:ba:80:50:7c:cc:22:09:1a:3b:
08:aa:cb:f0:f3:d8:42:fb:9a:35:8a:bb:0b:68:21:
5b:f1:86:b5:50:6e:1e:9c:58:2e:a1:60:99:dc:76:
78:bf:bc:3a:5d:09:57:0f:33:f6:f8:2f:bb:34:b9:
7d:1b:0e:15:b3:bc:2a:53:a3:29:dc:eb:1d:94:63:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
29:94:cb:d7:07:7f:37:18:30:fa:fd:fd:10:d9:2c:47:2e:de:
66:a9:e1:b3:df:6d:cb:03:09:2f:95:33:a2:c3:18:ec:bc:41:
2a:b9:3c:ed:2f:e6:82:6d:e5:88:70:69:4b:2b:e4:66:0b:de:
1b:1a:1f:d3:10:3e:6c:c6:6f:3c:a0:34:5f:db:20:29:27:64:
55:fd:4c:fe:f4:20:30:83:f0:e9:67:14:47:d2:57:16:e0:7e:
7a:d8:43:07:91:d4:8b:a5:0d:c5:43:ba:19:9d:cb:06:d3:ca:
96:c8:57:e4:34:31:10:8a:0e:1c:9f:68:a6:2e:55:f3:db:43:
11:e0:dd:f4:be:5c:a4:3f:6c:f7:14:45:83:1c:63:f2:65:e5:
ff:16:66:6f:15:ee:3f:bd:2d:01:99:b2:5e:ae:7d:f7:86:d0:
86:5c:fb:18:b6:32:58:90:13:f6:25:2e:a2:58:ff:12:48:79:
9f:62:9e:8a:2a:2c:3d:c0:79:1b:8c:a0:a5:16:25:9f:3a:96:
0d:15:23:56:f2:ae:de:d0:11:ed:dd:56:41:cd:1a:40:64:c4:
10:67:5c:33:e2:77:e1:c5:63:c0:c7:46:17:be:88:5c:86:d6:
88:f3:81:2a:82:2c:cb:23:aa:f0:06:b9:e4:95:d2:1d:c8:40:
35:59:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:23:30 2024 by rpki-client on console-ams.rpki-client.org