Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.cer (raw, json)
Hash identifier: 5qpRLkflBT7UpIHQw9JCnYRQi1nWIAOvARN1UYEW+vM=
Subject key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B79E46286E188C4CF0BA0182DBFCE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196881
IP: 93.190.112.0/21
IP: 185.135.36.0/22
IP: 2a05:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9e:46:28:6e:18:8c:4c:f0:ba:01:82:db:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:3c:5b:8b:07:3f:28:ad:4c:41:fe:03:f1:
1a:b7:35:49:b3:9a:ed:ef:ce:d3:1c:f5:46:e2:ff:
25:a8:84:51:59:85:5b:c7:e3:45:a2:9c:6d:60:46:
ba:ed:e5:65:d9:c8:af:92:28:00:c0:26:f4:92:30:
83:55:45:36:ec:7d:ff:98:b2:17:58:48:df:af:90:
35:1a:be:ed:af:70:24:67:47:ea:be:84:ed:86:17:
ba:08:fe:51:ee:d9:49:3e:97:75:20:ed:65:21:86:
ec:4a:02:7a:fd:f6:6d:9b:ac:f8:62:0d:8d:1f:be:
8f:56:aa:ff:25:a7:57:cb:e2:8e:2f:13:55:fa:51:
09:dc:3f:9b:7b:43:4a:cc:f7:9a:fd:cc:aa:67:a4:
b8:53:48:3b:78:49:c5:9f:6b:10:25:8a:b4:65:52:
d3:bc:74:76:b7:16:57:03:a4:9f:f5:2f:7c:45:99:
22:66:8b:d1:0e:de:55:a5:bb:39:92:a2:7d:c2:8c:
6b:0b:d3:0f:55:fd:74:fa:ea:32:dd:11:70:39:2c:
f3:21:b9:e8:21:bc:c5:8d:20:b3:c7:93:19:20:c2:
c5:5f:af:cb:6b:80:28:4b:4a:77:45:bf:99:4c:e6:
2f:4b:91:a1:16:20:a5:9f:cb:87:48:bf:fd:ec:0b:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.112.0/21
185.135.36.0/22
IPv6:
2a05:5b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196881
Signature Algorithm: sha256WithRSAEncryption
73:59:c4:cc:61:41:d6:65:35:01:3e:70:4d:85:77:e3:c9:57:
3e:2d:b7:a6:e5:0c:bb:7c:01:9e:d5:6b:3b:74:d1:37:19:1f:
1e:e0:16:a8:42:4e:68:2b:77:68:ab:02:8b:e1:46:06:39:54:
6b:09:7a:40:5b:af:4a:cd:92:5c:88:87:4d:c6:e5:ad:e0:10:
0d:ea:9f:b2:8d:86:87:8d:46:31:21:a3:da:c2:ed:51:cb:24:
3d:fe:da:43:58:d7:2a:9e:8e:4c:8a:a5:76:25:8d:ca:08:4d:
f6:a2:8b:73:e6:6d:c8:81:10:7b:e8:07:6a:79:36:f8:5a:9b:
7d:1f:85:c9:cc:3d:be:42:c1:fe:0e:e8:75:97:47:a5:93:56:
be:05:60:5e:c2:12:80:99:3a:bf:26:fc:48:6c:17:9b:52:39:
32:42:47:2e:ca:fe:41:02:bb:27:46:d9:bd:69:3a:a5:07:0c:
7d:7c:c7:7a:0d:9d:18:35:c1:9e:4e:1b:fb:a8:c7:7b:ea:12:
1d:00:6b:4f:6f:be:ac:e6:37:f2:39:25:2b:e2:cd:5c:d7:86:
b2:8f:57:44:a5:02:13:0d:4b:bc:21:9b:8b:b7:f6:f4:bd:ae:
f5:4a:34:99:b0:06:d7:58:d8:cb:c7:30:86:98:0e:76:2e:67:
7f:c6:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:14:35 2024 by rpki-client on console-fra.rpki-client.org