Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
File: bAlGwIGzK-hIywDY2TLowfcXlmg.cer (raw, json)
Hash identifier: /FKct3PD8USnfFFzTnJ5Lm+/YJDc/YfNwWBp9uag5+A=
Subject key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255AFD7339859BCBB378FAB3758CBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200318
IP: 194.169.60.0/22
IP: 2a0d:d40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:fd:73:39:85:9b:cb:b3:78:fa:b3:75:8c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:87:ce:4b:af:29:e2:6e:f8:e1:d8:48:0b:
48:34:12:a2:09:47:ec:c5:d1:4d:df:04:2b:7e:88:
b2:9f:20:51:2b:8b:3a:ad:a0:ce:36:2a:eb:8f:8d:
ec:bb:0f:a7:e6:0a:3f:db:7e:2a:35:a1:10:c9:e5:
27:21:40:11:a7:45:cd:07:0b:45:f0:e9:95:1a:b5:
73:65:f5:87:3c:75:6c:23:7f:23:45:53:d9:58:c5:
ce:6c:04:2f:82:b7:f4:ea:19:8a:c7:5c:56:36:17:
58:f6:9e:58:be:0b:bb:a1:d9:80:82:68:25:18:d9:
b2:6d:22:6b:85:95:34:12:6f:7a:7d:50:6e:9a:75:
4d:49:03:b2:13:9a:c8:5e:e2:f8:54:b8:9e:09:29:
91:21:00:4a:a5:1e:ed:bd:3c:c9:dc:96:08:16:5d:
fd:ef:47:2e:d2:09:bb:11:82:ae:6f:51:7b:62:f1:
cc:31:b4:ea:62:28:06:a5:5c:5e:2b:34:a8:6c:76:
29:7e:f7:48:9d:f9:a9:1b:ad:6d:06:a9:c2:87:48:
1d:d6:6e:14:e6:65:2e:5d:71:39:cd:0e:bd:fd:be:
34:13:59:e8:c3:d8:78:a5:42:9b:f0:7d:0b:6e:17:
aa:d0:db:ba:08:f2:83:0a:e2:39:f5:58:20:67:ed:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.60.0/22
IPv6:
2a0d:d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200318
Signature Algorithm: sha256WithRSAEncryption
29:d8:9b:2d:8f:9d:8e:28:68:3a:21:f2:04:24:fe:19:9c:03:
94:f6:10:70:79:e1:ab:c2:b5:56:ce:78:2d:ce:95:8f:36:de:
2f:60:9c:d3:81:fa:e3:63:27:9c:bc:4e:a1:10:08:58:b3:79:
a7:96:7c:59:69:b2:f5:84:c7:bc:d5:3d:94:41:78:21:1e:da:
6c:49:9d:ed:d7:ed:ef:3f:bb:d4:1d:cd:93:1e:6f:9b:72:61:
ff:53:8d:f2:99:6f:11:ee:ad:d2:27:be:41:05:fe:a2:df:25:
e0:5c:c3:3a:0f:b4:44:7a:31:26:2b:55:e9:2b:08:0a:06:0c:
b4:75:bc:bc:18:47:e3:73:ba:96:45:6e:5e:35:2d:eb:8e:ac:
fb:f7:f4:ab:1c:c5:ba:07:b8:ab:fb:0b:0b:96:87:ff:b0:3a:
34:0b:5d:6a:7a:90:09:58:5c:f7:df:88:fb:d2:9c:ff:a1:89:
e8:0d:18:9c:64:40:0c:09:a4:b8:94:ec:80:01:2a:76:22:cc:
20:2e:59:8f:11:5c:2d:fc:c8:a8:42:ed:ac:ed:07:ed:a0:61:
6a:5e:e1:55:15:67:32:3a:72:f6:e5:cd:3e:d4:d0:b4:63:d1:
09:76:00:68:5f:84:73:25:0a:cb:92:43:26:e7:ba:4c:61:70:
44:1f:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:50:05 2024 by rpki-client on console-fra.rpki-client.org