Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
File: bJSdK9ZO4X711H-WPj1depgrEq8.cer (raw, json)
Hash identifier: vNsspcPGPVX4RMGjKeEGGPavnaC8EY6kgN9hkiJnB0k=
Subject key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9203E4BCB9CABC4DE2977E03BBEFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.110.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:20:3e:4b:cb:9c:ab:c4:de:29:77:e0:3b:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:b8:85:9f:46:da:36:32:84:12:32:b9:f7:
2e:75:05:93:83:b4:d6:68:b3:2f:f4:66:7a:af:99:
3c:43:ac:3b:b3:74:88:38:8a:67:a1:ed:7e:0a:f6:
2c:d9:b2:6d:a0:d2:44:f5:9f:e7:86:d8:2b:ac:8e:
18:d3:e6:95:24:ed:f6:b8:1c:00:de:a4:2c:9e:b7:
2f:8a:db:8f:c0:06:79:68:bc:ac:9f:a9:c6:a7:4c:
c2:9b:4b:9f:35:6f:be:20:1c:ca:fb:f7:f4:47:bf:
37:5d:bc:f3:c3:38:16:fd:c7:01:90:b8:d3:73:c8:
e4:ef:9a:d3:8a:ce:05:0c:53:c3:90:89:5f:79:d6:
da:ea:07:e8:f4:f5:a2:d3:a8:69:07:60:fa:74:1f:
be:cd:bd:6b:8b:ae:9f:e8:47:86:bb:7d:3e:a7:3a:
10:03:92:8b:6c:4d:82:6a:76:04:16:4a:ce:42:fc:
e5:90:94:1c:19:6c:a2:d0:0c:e8:96:9d:70:94:fa:
27:62:46:13:60:71:47:65:39:f7:9c:dc:98:32:7b:
63:28:48:4f:ab:4a:62:f5:88:c2:41:1c:d2:23:04:
e1:a6:b4:c1:fe:2e:43:82:22:20:34:c8:ea:c0:42:
2c:c1:58:d3:59:54:97:5d:88:4e:7b:e6:40:f2:cb:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:03:fc:f0:e4:55:54:76:a5:6f:22:e0:7c:68:95:ef:1f:52:
9f:cf:78:12:f7:c6:2e:92:57:7a:f2:ab:4d:3f:9f:55:78:c4:
74:39:1a:b0:04:d4:20:69:c3:0b:17:96:93:ff:85:77:4e:70:
68:28:00:02:54:00:37:03:7b:5c:d9:92:d5:7f:6d:c2:08:9b:
10:bc:5c:db:3d:03:9c:40:38:cd:27:06:0b:40:2e:8a:ca:1e:
8c:94:cc:8a:ca:6e:3b:24:66:b4:43:69:3e:71:16:1d:62:7a:
fb:11:17:a3:81:d9:98:05:91:fa:15:08:ad:83:f4:ce:74:b1:
bd:37:dd:f2:24:11:0b:e9:16:27:e2:9c:ad:b6:32:ba:8a:5c:
75:c8:14:60:bc:e0:48:98:be:26:51:a0:79:72:b3:b9:13:bf:
22:65:c7:e1:17:5d:df:29:c1:9e:f3:72:f5:04:75:8f:88:b4:
2a:85:24:9d:e5:7c:34:a4:1e:04:4b:e3:1c:82:7c:da:26:fe:
8c:65:a0:d4:10:fe:1e:22:e0:2b:b2:61:f6:e3:83:37:04:78:
e4:b9:c9:74:50:ee:00:57:da:0f:3a:b2:fd:7d:86:dc:aa:2f:
e3:c7:9a:3b:68:ea:5b:de:00:d8:18:e5:a3:25:4a:20:db:68:
1d:48:34:54
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGuSA+S8ucq8TeKXfgO77+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk0OWQyYmQ2NGVlMTdlZjVkNDdmOTYzZTNkNWQ3YTk4MmIxMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXe4hZ9G2jYyhBIyufcudQWTg7TW
aLMv9GZ6r5k8Q6w7s3SIOIpnoe1+CvYs2bJtoNJE9Z/nhtgrrI4Y0+aVJO32uBwA
3qQsnrcvituPwAZ5aLysn6nGp0zCm0ufNW++IBzK+/f0R783XbzzwzgW/ccBkLjT
c8jk75rTis4FDFPDkIlfedba6gfo9PWi06hpB2D6dB++zb1ri66f6EeGu30+pzoQ
A5KLbE2CanYEFkrOQvzlkJQcGWyi0Azolp1wlPonYkYTYHFHZTn3nNyYMntjKEhP
q0pi9YjCQRzSIwThprTB/i5DgiIgNMjqwEIswVjTWVSXXYhOe+ZA8sufZwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGyUnSvWTuF+9dR/lj49XXqYKxKvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2Y4NjUx
Yi1jMTJiLTQyZDQtYWZkYS0yMzJmNDcwMzQ5MWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZjg2NTFi
LWMxMmItNDJkNC1hZmRhLTIzMmY0NzAzNDkxZi8xL2JKU2RLOVpPNFg3MTFILVdQ
ajFkZXBnckVxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwW6EMA0GCSqGSIb3DQEBCwUAA4IBAQAZA/zw
5FVUdqVvIuB8aJXvH1Kfz3gS98Yukld68qtNP59VeMR0ORqwBNQgacMLF5aT/4V3
TnBoKAACVAA3A3tc2ZLVf23CCJsQvFzbPQOcQDjNJwYLQC6Kyh6MlMyKym47JGa0
Q2k+cRYdYnr7ERejgdmYBZH6FQitg/TOdLG9N93yJBEL6RYn4pyttjK6ilx1yBRg
vOBImL4mUaB5crO5E78iZcfhF13fKcGe83L1BHWPiLQqhSSd5Xw0pB4ES+Mcgnza
Jv6MZaDUEP4eIuArsmH244M3BHjkucl0UO4AV9oPOrL9fYbcqi/jx5o7aOpb3gDY
GOWjJUog22gdSDRU
-----END CERTIFICATE-----
Generated at Fri May 3 11:43:10 2024 by rpki-client on console-ams.rpki-client.org