Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
File: BtoZ9ChesE0DEHM_SsABB7czN60.cer (raw, json)
Hash identifier: Giau+Tb0qwUgkB/QwlyrnpjR7ThH5z8GAqi+VaioSAA=
Subject key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7257D45F78597001E2A0552303D1C71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.156.116.0/22
IP: 91.228.168.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7d:45:f7:85:97:00:1e:2a:05:52:30:3d:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:b9:e8:55:24:7f:d7:84:97:2a:91:cf:b4:
75:2a:93:e1:3d:60:bd:eb:df:ef:ee:48:5a:40:5b:
e3:81:b5:93:7f:c5:dd:01:7f:8f:d7:ec:39:52:6c:
b4:e8:3e:8a:62:46:e8:b6:22:62:90:b4:74:14:33:
18:81:12:ad:e5:9c:7d:9f:80:20:30:b5:78:be:e6:
fa:be:5c:1b:35:43:f0:c7:53:99:ba:0b:dd:30:b1:
a8:b1:ee:57:da:f1:06:2f:9e:b7:ea:4e:20:3d:b8:
bf:63:b1:e7:83:7e:fb:59:89:c0:ff:07:b2:d4:4a:
65:27:4a:bb:93:46:ac:bc:54:da:11:3e:0b:ca:8d:
e1:7f:82:7f:f9:e5:0f:9d:15:f1:33:c0:aa:3f:ed:
b4:29:e4:c7:be:af:2c:e7:68:df:14:dd:27:0f:b0:
36:4c:6e:93:50:99:66:72:1b:35:84:66:5a:5b:eb:
0f:8e:e1:97:c9:c3:1c:8c:95:2b:5c:25:7a:56:f3:
90:aa:07:21:97:e6:85:50:da:4d:3b:cd:47:e0:63:
da:5d:ef:4c:d0:32:8a:1e:5e:7a:05:71:4d:90:14:
24:e3:59:0e:fb:26:25:eb:87:fe:72:9e:e2:d4:8b:
15:3a:83:ca:57:73:12:3e:d4:5d:fc:22:69:d5:ad:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6a:d2:bf:23:2c:9e:9e:24:6d:49:6b:10:f1:b8:0f:b5:73:
bf:a3:a5:db:0a:2a:53:0b:57:5b:66:44:f4:cd:74:2f:72:31:
32:17:c0:c9:86:87:fd:fd:70:48:e0:b9:4f:81:80:fe:66:ec:
0f:57:c7:cc:f3:83:1c:fa:40:8e:05:bf:a4:18:3c:87:bc:c3:
c4:83:67:ee:85:34:ba:98:44:ac:04:2d:f7:ab:e3:51:a4:c1:
19:59:b9:2c:5b:e5:e9:2c:44:8e:32:cc:c0:6a:3c:eb:59:6c:
68:b0:a5:e8:d7:99:a6:3b:46:af:d4:92:44:84:4f:6c:30:29:
76:24:a4:5d:77:58:34:5c:44:e1:a0:77:32:5a:7b:07:d7:a1:
aa:6c:bf:55:da:48:90:f6:11:5d:c9:e4:0f:ea:af:b1:73:7a:
8c:42:b8:35:50:74:a9:19:7b:eb:79:c3:8e:86:5f:73:01:59:
2d:b4:83:61:34:da:92:4f:51:02:fe:d5:4b:a0:49:da:3c:19:
56:44:a5:25:c7:e4:f4:8b:70:f5:5b:f6:f5:1b:93:e2:d9:ef:
49:f7:0b:d8:87:3a:86:5b:3f:a1:3d:7a:a1:5e:df:a1:96:fb:
95:7e:23:21:a4:57:c6:92:d7:28:61:5f:d0:e8:20:c7:b8:33:
88:60:b2:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:00 2024 by rpki-client on console-fra.rpki-client.org