Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
File: BtvCTgiywmrakK1jjxrcdH9ppF8.cer (raw, json)
Hash identifier: mXsyT+ydONKhijovVtqrCpmGShbsP77hbc+ZVprFFJQ=
Subject key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01900C6249A6B50BCC8A667874C88B146A81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Jun 2024 12:18:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52187
AS: 56693
IP: 45.149.124.0/22
IP: 91.226.182.0/23
IP: 2a0f:4e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:62:49:a6:b5:0b:cc:8a:66:78:74:c8:8b:14:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 12:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:ed:8b:53:21:9b:3b:9f:1d:96:24:9a:e9:
bd:9d:e4:c6:79:1e:04:e7:58:ad:c1:02:78:e1:b0:
8a:2f:4a:6f:68:10:b5:62:9f:4b:3e:4a:bb:34:db:
6a:54:68:92:fe:ba:60:37:5b:28:28:7d:ad:30:aa:
98:69:11:2b:a1:a0:2b:cd:02:3c:0c:00:17:75:b5:
80:86:45:6a:d9:8a:21:eb:d3:4e:53:7e:38:cf:ee:
71:c3:db:b1:32:f2:75:14:09:64:24:6b:3c:4f:53:
e2:60:f3:10:12:ad:3d:b3:c0:91:d9:f1:b2:d5:f3:
72:06:bb:22:28:16:dd:77:cb:e7:7c:8e:f4:65:1a:
1b:d9:32:65:c0:6a:ef:8c:57:a1:9a:58:43:e3:21:
66:64:cf:78:97:76:c3:31:54:7a:4c:54:a1:e6:ce:
51:19:c0:95:7a:7b:32:0f:a2:f3:9a:cd:a5:e9:c0:
98:ef:33:dc:d1:fd:5a:45:85:71:f9:a0:c0:35:39:
45:84:a5:85:52:4f:4c:b8:09:a4:3f:37:6c:e4:c4:
26:b9:01:3a:ca:50:34:1b:de:d9:b3:b0:64:9a:81:
58:42:1a:46:48:c4:5d:3a:70:7f:19:02:2a:0c:50:
32:b2:3d:bc:6a:36:9d:54:3e:dc:8a:c8:8e:0d:45:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.124.0/22
91.226.182.0/23
IPv6:
2a0f:4e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52187
56693
Signature Algorithm: sha256WithRSAEncryption
39:71:4d:9c:a3:f2:9f:62:77:67:75:76:c4:0e:79:bb:b5:4b:
86:b9:4f:66:5f:9f:dd:18:42:21:86:84:b1:51:81:c4:48:fe:
8d:94:cd:b5:06:74:40:3f:c4:e5:39:25:d9:00:fc:9b:54:08:
07:ba:1b:2e:10:be:2c:4b:d3:bf:7b:b2:e3:55:8e:0e:49:09:
6e:31:89:9f:be:90:0f:9f:7e:e3:d2:b9:52:2e:22:e9:9c:c6:
c9:b4:48:c1:7c:8f:72:60:55:9b:3a:56:bf:27:2b:ab:42:d1:
95:23:c0:4b:ee:16:d9:ae:b2:11:30:f1:0e:af:9f:cf:5c:1f:
e8:e0:67:c4:f6:5b:1f:00:4e:2e:3f:29:b2:e5:4b:b6:0e:98:
aa:44:7d:82:de:86:19:f7:98:b7:a9:75:f4:dd:69:b6:f0:ab:
08:6b:04:03:7c:4a:cf:8e:00:8f:35:63:74:99:d3:29:84:c2:
e2:f0:e8:99:42:de:c7:b3:38:39:6c:d0:9f:da:95:66:8b:3d:
08:bd:81:b6:a5:3f:ed:35:9d:59:da:79:64:16:4d:ed:1e:69:
c8:52:74:23:30:41:7b:94:9d:96:2e:ff:32:ef:bc:ca:a1:7d:
09:b1:cd:10:8e:c8:c9:41:9f:9d:e6:ae:09:2e:bd:e6:36:30:
cf:a5:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:57 2024 by rpki-client on console-ams.rpki-client.org