Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
File: BzptPeXBJcH-i1--iVhGVuWGGi0.cer (raw, json)
Hash identifier: KW4LW5t3sYl+L/QVTyq9EFZAlRyucFXkRDnI0dHqdzE=
Subject key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8A984C2A0275A4084C7350545C064
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.156.188.0/22
IP: 185.224.32.0/22
IP: 185.246.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a9:84:c2:a0:27:5a:40:84:c7:35:05:45:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:18:45:fe:ed:71:08:ab:ac:89:1f:13:0e:
3e:c1:c4:35:66:15:55:a2:69:90:38:52:e1:0d:cb:
df:47:23:04:00:ab:9e:81:6e:80:50:ab:de:c3:3e:
1d:55:1f:aa:d6:0f:d1:21:91:c2:62:25:cb:82:54:
42:a9:6f:80:90:b3:05:82:27:2f:d9:f8:0e:ed:99:
c9:6a:90:57:31:4e:bf:3a:89:45:fa:ba:c1:e0:7a:
8a:ea:71:ad:f2:ae:f8:bd:9a:a7:d6:91:6d:f5:f9:
56:6d:0e:86:88:64:63:ca:1f:0d:cd:a6:44:5d:f1:
dc:9d:35:9a:68:30:8d:6d:ea:3c:c6:02:5d:99:f1:
2b:bc:69:b3:1b:6a:72:1f:65:9c:ca:3a:74:20:b9:
04:a8:ef:c3:bd:1b:11:ce:70:96:d0:25:6e:02:db:
56:55:7f:98:c6:8e:3f:ae:8a:20:d9:3e:44:97:92:
70:17:3b:84:d3:ca:0c:0e:77:8a:fd:b1:41:f0:c5:
29:a8:1b:a2:81:ef:0a:74:9d:61:7b:20:8c:bb:3c:
b0:78:5f:c6:66:df:d2:8e:68:b3:fc:ae:d8:93:74:
1d:aa:e4:a0:bf:60:c9:32:cd:35:98:9a:9b:8d:ec:
86:19:70:09:a5:dd:2a:98:d4:f7:1f:5d:f2:f0:87:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.188.0/22
185.224.32.0/22
185.246.24.0/22
Signature Algorithm: sha256WithRSAEncryption
58:18:e7:99:9b:fb:a3:7c:9b:1f:94:67:48:c3:9b:52:22:c4:
e5:d5:9b:d6:6a:8c:a2:b5:e9:2c:66:c5:61:b3:b4:31:82:33:
25:02:1b:14:cc:7f:72:48:8e:6f:aa:fd:ab:b0:53:03:75:11:
ac:c7:14:6e:0e:53:8e:98:8e:46:18:67:a0:24:a3:f7:13:53:
72:62:ea:3c:18:10:38:0d:8d:03:d6:83:83:dd:3b:a7:c2:b2:
f6:25:e4:f3:a1:65:c8:8d:ae:b2:3e:fe:79:89:ef:3f:0e:97:
a5:12:92:81:46:98:53:b6:33:8a:17:9e:51:e4:6e:7b:ee:3a:
67:3d:59:e6:05:bf:b5:8e:35:f5:f4:37:92:81:7d:d7:a2:28:
32:8a:db:ab:2b:2d:be:c0:59:79:13:cd:85:50:6f:00:0e:d5:
88:fd:53:70:05:6a:c5:ff:ad:e3:61:b0:f0:ad:e5:e8:3f:7d:
8d:ca:03:d9:61:12:4e:7b:5d:10:35:b0:ea:ab:9f:25:09:29:
f4:5a:3d:6a:16:17:4e:77:79:86:5f:92:b0:83:3f:6b:3d:20:
d0:4b:ef:c2:5a:70:1b:27:7c:c5:2d:d5:ff:59:3d:84:ca:bb:
ce:b1:09:b6:1a:d1:5f:8d:80:9e:36:95:27:07:a8:8b:06:2c:
b1:7b:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:03 2024 by rpki-client on console-fra.rpki-client.org