Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
File: BtCToXdsCFomSP94tM4f5BfFY10.cer (raw, json)
Hash identifier: KMe/v/XZJxbuaGIOUhG7+3LMxBPkwjsfO/P25PDRHq0=
Subject key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7935548F062BB00670E33AF0F5ECD7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.5.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:55:48:f0:62:bb:00:67:0e:33:af:0f:5e:cd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:53:d8:63:cb:f2:42:83:d0:9e:05:73:a0:
c0:57:84:e0:73:86:a9:cf:b8:43:42:0d:2e:61:88:
99:72:89:7f:f8:19:06:08:c8:d3:40:84:13:98:58:
4d:07:2f:9d:62:a1:00:83:8f:44:f3:24:ef:1d:bb:
e6:fe:3d:a6:93:cb:d7:31:8b:84:ad:78:bf:d6:af:
76:46:e0:00:d2:b6:fd:b6:5e:2c:a6:41:d7:58:18:
45:52:c0:94:56:5b:e5:a1:cb:c3:d4:3e:78:5c:d5:
8b:dd:dc:89:9d:73:a0:67:75:83:93:67:58:21:2b:
94:73:5c:f1:d7:ee:fb:da:3b:b3:a2:4f:2f:b0:91:
67:4f:bf:1a:f5:95:57:3f:d7:42:f0:23:eb:6d:59:
a0:d6:b3:b0:5d:d6:6b:0c:39:78:e2:78:3b:76:9f:
4d:99:b5:fb:c5:c8:13:d0:90:ea:3d:93:c1:14:b6:
f1:26:88:77:e0:1c:d6:2f:22:79:1b:ed:bb:3c:de:
69:d5:7c:bf:ac:16:f3:fc:a2:12:a4:1b:22:b1:9b:
aa:55:b6:de:21:b0:f9:31:64:c5:77:b3:90:eb:1c:
32:4c:64:6d:38:39:3e:e5:d6:b0:a5:e7:e4:34:1b:
63:d4:a3:6d:7a:c3:6f:51:29:88:2a:58:ff:e4:a0:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e4:bf:cf:b8:89:60:5a:65:87:22:58:c7:ed:7d:07:e8:84:
92:c6:b2:13:b7:88:64:26:a4:04:7e:26:1f:fb:6c:42:80:ed:
ba:ed:66:02:81:fe:21:35:95:95:ae:7e:ad:90:60:e3:2f:d5:
79:cc:f6:86:8d:39:14:cf:4d:59:50:51:b0:a7:d4:07:9f:27:
33:47:48:56:b7:8a:23:b4:b1:9c:01:e3:65:e8:be:ff:79:4e:
42:b7:f3:5a:4a:35:86:ed:7c:98:4b:17:1b:a8:e2:26:2d:00:
49:d6:c0:dd:8e:6f:fc:6b:2f:fb:2c:96:02:2f:6c:65:ec:7c:
d6:66:5c:0b:f2:ae:0a:d2:6b:55:7c:de:17:d0:ec:77:9d:ec:
99:c4:51:e8:4c:35:3c:49:28:c2:de:e8:e4:c1:23:3c:8d:21:
00:50:2f:a1:6b:e0:78:3f:6b:0d:31:f4:bd:d8:89:cb:27:8a:
dc:a0:be:c9:2b:50:38:10:29:f0:d5:92:b3:2a:63:b7:c0:99:
b3:34:48:f9:0f:1d:35:96:43:8f:bf:85:62:74:3f:77:74:7f:
47:a3:60:32:71:6e:ea:13:03:19:b3:da:80:fa:29:81:4c:07:
da:0d:b4:7e:a1:f9:8a:a5:2f:0a:2f:07:d3:70:53:73:22:60:
77:ed:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:00 2024 by rpki-client on console-fra.rpki-client.org