Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
File: bHwktnELOtfXKCoMlH9rlTHVjsU.cer (raw, json)
Hash identifier: 70BJpP5j30+bGh/gmxxljYNdJdBV4VOAzEr9bU3o1H8=
Subject key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3494E86A438690FD2B7E81786C3EA4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.74.44.0/22
IP: 2a05:4940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4e:86:a4:38:69:0f:d2:b7:e8:17:86:c3:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:9e:03:d9:85:93:61:50:c8:ec:e8:ea:0c:
1f:62:54:78:c9:c7:d8:4d:ca:bb:e7:c9:b1:88:a3:
11:1c:ac:57:b4:a7:a8:8d:70:42:61:81:02:a8:8c:
8d:96:5f:10:90:80:db:5c:b8:0a:7d:e2:61:4a:3c:
78:81:b0:66:59:08:f7:93:09:da:ee:1e:ba:f8:3d:
56:df:b0:0b:59:0e:79:f6:08:5d:ae:4a:d4:da:e4:
f5:e1:6a:77:de:16:28:13:d6:ef:f0:79:37:77:45:
87:e1:46:60:92:01:a2:e9:d7:0f:cc:18:e7:46:ba:
61:2d:89:d6:51:d2:1d:04:d7:b1:0a:64:66:94:80:
0e:b2:6a:aa:83:8d:99:6c:0b:5a:07:66:b2:b9:4d:
dd:fe:96:2a:89:b9:4b:79:58:ad:99:3c:59:c7:b0:
99:43:d7:8f:30:92:ab:c6:04:9e:a0:7f:83:c6:c0:
3b:7d:e0:4a:d7:27:8f:27:e4:4f:a2:15:e8:e5:ad:
20:51:3b:a9:34:8f:62:43:74:cd:5b:8b:70:42:85:
cf:c2:d2:4b:a1:7b:66:fe:00:45:a2:5f:06:f9:1f:
99:bd:cb:30:07:c8:86:41:bf:f8:f8:f3:d1:b6:86:
e5:b7:ce:49:6e:36:67:66:db:f6:9b:03:af:92:79:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.44.0/22
IPv6:
2a05:4940::/29
Signature Algorithm: sha256WithRSAEncryption
71:ef:d3:87:65:b0:77:92:f7:9b:f5:02:98:08:ca:c3:24:c4:
6c:e2:d9:6c:3a:5f:3b:7d:5f:62:83:e6:07:2d:3b:37:18:50:
ab:fc:4c:cd:59:65:4a:40:e4:9f:01:94:6c:5f:10:4c:8d:91:
a3:22:4f:c5:85:49:b0:01:54:8a:24:86:6f:d8:9b:14:80:84:
c5:1f:44:a2:44:6d:84:9b:36:35:b5:b9:87:74:d1:1b:37:6f:
7d:81:56:f8:b7:26:49:1f:13:11:19:b8:0e:26:ed:d4:20:f2:
00:1f:44:d3:77:a4:41:70:24:de:eb:11:7e:ff:0f:76:40:61:
f3:e6:a7:41:3e:25:b9:16:99:9a:e1:f8:30:4d:76:fa:40:4b:
12:74:8d:66:05:a7:48:66:a5:1b:ea:76:4e:45:ef:be:99:f1:
47:71:62:89:33:90:20:16:ee:d0:7c:83:eb:65:95:96:d9:c0:
b8:92:01:f4:70:eb:c9:56:dc:b7:21:aa:1e:e7:8d:0d:f7:01:
97:91:cd:7e:d7:46:f0:04:16:66:a0:d4:26:69:d9:a1:bc:c6:
ff:42:81:18:25:f2:c2:47:e5:87:78:70:5e:d4:67:59:2e:51:
51:0f:ca:78:08:92:0b:c1:49:69:49:37:8d:14:38:76:05:f9:
1b:b3:dc:5a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzDSU6GpDhpD9K36BeGw+pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzdjMjRiNjcxMGIzYWQ3ZDcyODJhMGM5NDdmNmI5NTMxZDU4ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtGeA9mFk2FQyOzo6gwfYlR4ycfY
Tcq758mxiKMRHKxXtKeojXBCYYECqIyNll8QkIDbXLgKfeJhSjx4gbBmWQj3kwna
7h66+D1W37ALWQ559ghdrkrU2uT14Wp33hYoE9bv8Hk3d0WH4UZgkgGi6dcPzBjn
RrphLYnWUdIdBNexCmRmlIAOsmqqg42ZbAtaB2ayuU3d/pYqiblLeVitmTxZx7CZ
Q9ePMJKrxgSeoH+DxsA7feBK1yePJ+RPohXo5a0gUTupNI9iQ3TNW4twQoXPwtJL
oXtm/gBFol8G+R+ZvcswB8iGQb/4+PPRtoblt85JbjZnZtv2mwOvknmLeQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGx8JLZxCzrX1ygqDJR/a5Ux1Y7FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzlmYTgx
NS1iNWZjLTQzODctODc3MS0xOGYwYTUwYzhlMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvOWZhODE1
LWI1ZmMtNDM4Ny04NzcxLTE4ZjBhNTBjOGUyNi8xL2JId2t0bkVMT3RmWEtDb01s
SDlybFRIVmpzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUosMA0EAgACMAcDBQMqBUlAMA0GCSqGSIb3
DQEBCwUAA4IBAQBx79OHZbB3kveb9QKYCMrDJMRs4tlsOl87fV9ig+YHLTs3GFCr
/EzNWWVKQOSfAZRsXxBMjZGjIk/FhUmwAVSKJIZv2JsUgITFH0SiRG2EmzY1tbmH
dNEbN299gVb4tyZJHxMRGbgOJu3UIPIAH0TTd6RBcCTe6xF+/w92QGHz5qdBPiW5
Fpma4fgwTXb6QEsSdI1mBadIZqUb6nZORe++mfFHcWKJM5AgFu7QfIPrZZWW2cC4
kgH0cOvJVty3Iaoe540N9wGXkc1+10bwBBZmoNQmadmhvMb/QoEYJfLCR+WHeHBe
1GdZLlFRD8p4CJILwUlpSTeNFDh2Bfkbs9xa
-----END CERTIFICATE-----
Generated at Fri May 3 03:14:34 2024 by rpki-client on console-fra.rpki-client.org