Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.cer (raw, json)
Hash identifier: 3hZCN7JV2lu0AV85IFRtFenkQj2YkegAPXJAaY4ziu4=
Subject key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010A3629C27AF4B62B0EBF332C9A40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201967
IP: 193.104.143.0/24
IP: 2a0c:2380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0a:36:29:c2:7a:f4:b6:2b:0e:bf:33:2c:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:ac:2d:57:df:d1:23:a2:a6:8d:59:f5:c6:
44:29:42:a5:97:31:f5:a5:d0:d3:9e:7b:ba:22:62:
db:b4:8b:4c:92:80:f1:08:a7:95:e6:68:ac:68:77:
f5:1f:5a:bd:22:87:77:a2:df:64:e4:b9:c0:37:fc:
d6:e1:63:91:19:d2:e1:7f:03:2d:db:92:09:56:91:
a2:6c:94:06:18:9e:e5:cd:23:24:ec:37:6c:71:8d:
83:ad:2d:22:a4:2f:a0:bd:93:27:c1:54:4c:56:41:
f9:7f:f9:ae:f3:b1:e1:1a:3f:b1:8c:be:9d:9c:1e:
a2:c7:a3:fb:aa:3d:51:38:08:f4:9a:96:a2:97:08:
72:12:38:2c:d7:a4:df:53:7a:d2:aa:b5:5f:2d:e6:
bd:45:9d:87:ee:06:ad:13:de:d8:88:4b:a4:9e:71:
43:83:9f:73:f7:ba:34:78:be:53:16:7d:cc:0c:eb:
7e:83:37:05:2a:7b:a3:86:3e:0a:2b:8f:4a:1d:17:
5d:cb:02:5d:73:9b:15:a3:1c:9b:fb:23:0a:96:ce:
9c:b9:f4:4d:62:d2:56:36:f1:cd:b7:1b:d5:84:3f:
38:9a:c4:3e:98:db:12:cf:0c:74:f5:19:ee:ee:cf:
e1:62:7f:9e:0f:8a:ad:e1:36:42:46:f6:08:c8:14:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.143.0/24
IPv6:
2a0c:2380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201967
Signature Algorithm: sha256WithRSAEncryption
04:bd:b0:8a:10:d7:06:94:6b:ba:32:ae:09:2c:a4:9c:38:68:
f0:1e:d2:29:21:50:4d:f2:df:5b:dd:43:c1:42:b5:51:92:e6:
6a:da:70:a1:d0:e6:40:46:4a:5a:c8:8d:3a:df:78:db:0f:62:
b3:a0:4b:74:8e:d5:42:6e:15:f4:5c:3d:9b:68:25:7c:d6:ac:
c8:a0:10:0d:28:6b:5e:85:33:0a:cd:0b:a8:d7:f0:e3:40:17:
07:d2:33:2f:f8:99:1f:fc:ce:11:2d:18:98:c1:67:dc:a5:8c:
bf:89:e9:74:86:fd:b3:c7:57:e8:59:eb:20:8b:09:98:3c:ab:
59:26:8b:3d:66:70:d6:3c:70:5a:10:b8:3a:e4:36:2a:76:09:
b0:6b:ea:aa:93:29:4d:f5:e5:37:5b:fd:ad:66:96:08:19:ba:
4a:e8:0a:72:0f:1e:db:ab:d9:2b:55:fe:94:1d:f7:12:37:d9:
52:d6:6e:5b:26:f8:07:72:c5:98:a6:5b:5e:fc:d4:6d:f6:50:
2c:60:3a:f6:ec:4d:ca:9d:ae:59:a9:d7:fb:30:a4:5a:ce:51:
1a:06:66:5e:62:1c:05:5f:53:ac:06:7c:a6:04:3f:82:6f:c2:
a6:4c:22:45:1b:72:1c:0e:f9:73:d0:b3:97:66:20:b3:61:e2:
78:0f:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:30:41 2024 by rpki-client on console-fra.rpki-client.org