Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
File: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer (raw, json)
Hash identifier: sgdXk+/HZhBL8/DTMWsfuneYAQVd1o8seNmIxsqZUiE=
Subject key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF53A2613D833836319BC6722706E3E39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 14:17:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.153.146.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:3a:26:13:d8:33:83:63:19:bc:67:22:70:6e:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 14:17:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:e2:ae:4b:a9:92:4c:04:10:d7:79:2d:e0:
71:51:e6:95:42:20:72:35:e0:a5:33:cd:23:8d:b4:
8b:07:2f:82:48:52:6a:1c:f0:d5:67:f4:a2:7c:e7:
bc:33:3e:d4:0f:88:5b:18:a3:f4:7a:d1:79:72:16:
48:87:63:72:49:9c:b9:ce:a8:8d:a3:17:5a:78:b8:
b5:9d:3c:f1:39:ef:62:cd:3c:43:fe:9e:54:ca:fb:
5e:e3:45:0f:a7:35:d5:ff:fd:aa:a9:fb:5b:5f:69:
ac:b8:8d:b8:1e:06:b5:23:65:25:d3:f2:4f:27:23:
d0:62:98:fb:c9:e7:3f:95:92:13:2b:e4:6e:e4:52:
f0:c4:6f:a6:03:c1:20:6b:40:f8:74:13:44:9a:69:
9d:ea:08:4d:f2:3c:4c:66:09:4e:ca:fc:10:f0:d5:
7c:43:6c:1e:f1:f1:54:7e:c1:75:e9:4a:07:84:35:
7e:6f:15:31:1f:fd:dc:f1:01:3f:48:3c:fd:76:46:
ba:11:1d:d2:ad:8f:a4:08:7f:ca:40:0b:06:54:9c:
62:4b:63:63:b1:f6:1d:9b:ab:6b:9d:e0:61:a7:e1:
31:f5:ed:b9:c7:cc:af:7d:bd:74:55:3c:64:67:d7:
80:6f:0b:53:4a:2a:39:96:40:6e:5f:14:e0:c9:bf:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.146.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d1:6a:f8:f1:82:ac:30:50:46:f6:c9:0d:27:11:d4:b9:36:
a0:76:61:74:a2:e3:95:02:9a:85:0d:26:fa:5b:47:68:2a:54:
40:8c:85:3e:72:cc:1e:41:47:97:c9:ab:3b:10:33:6d:4d:a4:
70:5e:8a:99:64:01:8c:db:05:fd:0d:d1:b1:5a:cc:df:2a:df:
63:be:55:b0:1e:0d:79:c8:61:5e:50:a4:c3:1f:40:14:b2:dd:
1f:00:c6:c9:e0:8b:42:dd:4c:51:c0:59:a7:1d:a1:3f:fd:78:
f0:17:f6:69:01:c2:50:e8:c7:21:58:27:95:b9:f0:2b:58:73:
1b:21:b0:a0:6b:7e:c0:08:2f:eb:b3:8f:fc:d4:2a:a5:ac:42:
6d:a1:31:cf:6f:8e:4f:5e:03:f8:f0:84:8a:3d:8e:67:a9:06:
ee:08:e3:e9:37:29:65:b2:dc:12:9b:09:d5:d5:1e:2d:aa:24:
43:5f:e0:8a:12:42:cc:46:e8:99:e0:f1:ad:ca:b6:2c:9b:75:
bd:a2:a6:8f:0c:0a:1c:07:14:a8:59:2d:b1:4d:dd:1b:1f:30:
3b:1e:b0:42:86:68:80:ee:04:8e:c2:81:5a:08:61:14:61:f9:
a4:34:92:38:dc:8d:87:ba:b3:37:31:f2:4f:ed:a4:ef:e1:65:
dc:1f:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:22:02 2024 by rpki-client on console-fra.rpki-client.org