Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
File: bG9jkROWOM74MYEUEyzPJuFn06Q.cer (raw, json)
Hash identifier: OUAPHRiqrnlPRVwORJCrUuTG2XMUYLt770snfITPwrQ=
Subject key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492DDED3E49D09F8A3F4788FF58F7AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212373
IP: 193.163.168.0/24
IP: 2a10:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:dd:ed:3e:49:d0:9f:8a:3f:47:88:ff:58:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:40:7b:51:50:a7:1b:be:f2:7e:ad:d3:3b:
72:9e:5d:19:00:dd:47:03:6f:d1:24:a2:01:7c:2a:
13:57:f5:48:a2:9e:29:bd:80:93:6c:32:3e:2e:5e:
80:55:59:1a:e1:21:48:cb:56:90:9b:cb:68:14:ce:
6f:62:8c:78:0d:6f:2d:42:bc:0b:78:70:fe:6e:78:
4c:5c:32:26:75:46:89:17:c4:cf:49:81:0e:3b:22:
87:b4:f3:08:a9:28:2a:1e:80:d7:d2:1f:3d:6c:6d:
85:9f:67:61:d9:50:c7:f3:1b:98:ca:68:c6:8a:3a:
29:8e:ee:f8:e6:1c:b8:bd:27:86:e9:55:ba:c7:54:
43:ec:ac:b2:fe:68:66:e6:82:68:64:72:4c:42:57:
ef:45:19:4e:53:b5:be:61:d7:13:2a:9e:14:b8:28:
59:4d:3f:ef:86:c7:de:f5:5f:c3:df:19:64:bf:af:
18:a0:80:ad:65:57:f1:97:98:84:7b:3a:ae:4f:36:
2e:5d:a2:b6:d7:77:0d:16:3e:02:eb:05:78:78:46:
7a:38:e5:4d:4a:e0:13:78:e3:18:13:41:34:b2:41:
2d:77:ed:77:5d:ae:97:64:b2:c9:5d:76:29:43:d3:
45:fe:e3:be:c2:c8:c1:c2:5c:2a:86:b0:fa:7f:b8:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.168.0/24
IPv6:
2a10:8ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212373
Signature Algorithm: sha256WithRSAEncryption
57:e2:29:09:55:7f:dc:60:00:5a:7d:1a:27:82:c6:d6:71:eb:
3f:a3:2e:d8:82:0a:14:2b:96:d0:1c:43:74:37:85:76:65:26:
9f:ac:80:1b:12:32:1d:0d:f1:c4:37:b9:0a:be:92:cd:49:8e:
22:d4:2a:fe:8a:95:84:e0:ce:77:dc:5f:96:41:52:0d:55:58:
73:51:d7:89:43:9d:c2:46:14:cf:99:50:81:a7:2f:ca:a2:63:
e4:58:6b:9d:71:ae:5b:c7:ab:73:59:55:a3:5e:9e:b5:ce:1a:
df:b5:eb:0a:0f:09:d2:32:ff:36:1b:17:29:d2:25:de:43:db:
a3:f2:36:d5:89:60:c3:6a:b7:b9:9b:14:44:cb:95:86:df:87:
ac:dc:de:71:4c:c3:1a:3d:bf:6c:cd:e4:e4:0d:d4:e9:c4:69:
66:31:a5:0f:a1:84:c5:60:cc:4c:cf:fb:f2:73:e2:7c:74:9b:
98:dd:93:e7:e7:5d:9d:2a:14:07:81:c8:3c:3f:31:cd:ad:23:
ad:1f:2e:c3:3c:ef:17:1c:06:ca:88:23:dc:e1:b9:58:a6:e0:
87:55:2b:4f:0c:87:34:75:82:59:05:fb:9a:c7:86:03:6d:a9:
4d:89:6a:cf:56:56:95:aa:96:f7:5d:c3:b5:3b:c7:fd:41:87:
4a:9f:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:30:45 2024 by rpki-client on console-fra.rpki-client.org