Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
File: bJSdK9ZO4X711H-WPj1depgrEq8.cer (raw, json)
Hash identifier: eByeGQW/StHQStzWG5YoFaatXjT5GOHXOjXoZgGkj0Q=
Subject key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA495E01E0627EDECD2D157FEEE0B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.110.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:5e:01:e0:62:7e:de:cd:2d:15:7f:ee:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:b8:85:9f:46:da:36:32:84:12:32:b9:f7:
2e:75:05:93:83:b4:d6:68:b3:2f:f4:66:7a:af:99:
3c:43:ac:3b:b3:74:88:38:8a:67:a1:ed:7e:0a:f6:
2c:d9:b2:6d:a0:d2:44:f5:9f:e7:86:d8:2b:ac:8e:
18:d3:e6:95:24:ed:f6:b8:1c:00:de:a4:2c:9e:b7:
2f:8a:db:8f:c0:06:79:68:bc:ac:9f:a9:c6:a7:4c:
c2:9b:4b:9f:35:6f:be:20:1c:ca:fb:f7:f4:47:bf:
37:5d:bc:f3:c3:38:16:fd:c7:01:90:b8:d3:73:c8:
e4:ef:9a:d3:8a:ce:05:0c:53:c3:90:89:5f:79:d6:
da:ea:07:e8:f4:f5:a2:d3:a8:69:07:60:fa:74:1f:
be:cd:bd:6b:8b:ae:9f:e8:47:86:bb:7d:3e:a7:3a:
10:03:92:8b:6c:4d:82:6a:76:04:16:4a:ce:42:fc:
e5:90:94:1c:19:6c:a2:d0:0c:e8:96:9d:70:94:fa:
27:62:46:13:60:71:47:65:39:f7:9c:dc:98:32:7b:
63:28:48:4f:ab:4a:62:f5:88:c2:41:1c:d2:23:04:
e1:a6:b4:c1:fe:2e:43:82:22:20:34:c8:ea:c0:42:
2c:c1:58:d3:59:54:97:5d:88:4e:7b:e6:40:f2:cb:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:24:7d:7f:b4:cd:d4:89:48:1a:e4:74:6f:2a:b2:31:19:
03:54:68:dc:8b:b1:54:e4:29:24:70:87:14:3b:87:a4:91:94:
cf:58:30:ba:13:73:1c:d1:30:0b:5d:0f:b1:71:3e:25:8d:01:
e9:cd:a6:0f:7a:36:9b:f8:1f:58:27:39:66:ea:15:e0:96:b1:
4e:56:66:d7:79:1c:ff:67:a1:6c:ba:9f:21:83:27:46:38:28:
19:a8:6c:38:1e:4d:3b:0f:d7:f6:64:d9:fa:01:7e:e6:4d:3f:
2a:64:50:ce:07:8e:76:15:2b:f3:9c:c2:c6:2a:e3:da:7a:fe:
6b:69:fe:15:7c:96:b7:3f:c3:cb:32:7d:db:38:9b:65:bf:40:
41:ae:d0:7b:d8:ed:a0:39:c8:57:5d:1c:51:4f:a2:97:fe:e8:
b0:3b:7e:0a:90:de:f8:3e:27:52:39:25:97:19:96:23:8e:93:
de:a7:25:89:47:51:c2:51:bc:fb:1d:15:4b:ec:bb:d6:9d:d5:
ae:21:1b:06:6b:0d:b2:90:e3:08:1f:9e:47:f2:4a:9f:36:3f:
cb:fd:23:a3:3b:4c:1b:eb:13:97:1f:7c:b3:c1:63:91:6c:64:
5f:cb:4e:b5:01:e0:bb:12:8b:07:c7:6a:44:c3:b3:64:ef:5c:
6e:27:e3:a7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQf+kleAeBift7NLRV/7uCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk0OWQyYmQ2NGVlMTdlZjVkNDdmOTYzZTNkNWQ3YTk4MmIxMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXe4hZ9G2jYyhBIyufcudQWTg7TW
aLMv9GZ6r5k8Q6w7s3SIOIpnoe1+CvYs2bJtoNJE9Z/nhtgrrI4Y0+aVJO32uBwA
3qQsnrcvituPwAZ5aLysn6nGp0zCm0ufNW++IBzK+/f0R783XbzzwzgW/ccBkLjT
c8jk75rTis4FDFPDkIlfedba6gfo9PWi06hpB2D6dB++zb1ri66f6EeGu30+pzoQ
A5KLbE2CanYEFkrOQvzlkJQcGWyi0Azolp1wlPonYkYTYHFHZTn3nNyYMntjKEhP
q0pi9YjCQRzSIwThprTB/i5DgiIgNMjqwEIswVjTWVSXXYhOe+ZA8sufZwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGyUnSvWTuF+9dR/lj49XXqYKxKvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2Y4NjUx
Yi1jMTJiLTQyZDQtYWZkYS0yMzJmNDcwMzQ5MWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZjg2NTFi
LWMxMmItNDJkNC1hZmRhLTIzMmY0NzAzNDkxZi8xL2JKU2RLOVpPNFg3MTFILVdQ
ajFkZXBnckVxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwW6EMA0GCSqGSIb3DQEBCwUAA4IBAQAZdCR9
f7TN1IlIGuR0byqyMRkDVGjci7FU5CkkcIcUO4ekkZTPWDC6E3Mc0TALXQ+xcT4l
jQHpzaYPejab+B9YJzlm6hXglrFOVmbXeRz/Z6Fsup8hgydGOCgZqGw4Hk07D9f2
ZNn6AX7mTT8qZFDOB452FSvznMLGKuPaev5raf4VfJa3P8PLMn3bOJtlv0BBrtB7
2O2gOchXXRxRT6KX/uiwO34KkN74PidSOSWXGZYjjpPepyWJR1HCUbz7HRVL7LvW
ndWuIRsGaw2ykOMIH55H8kqfNj/L/SOjO0wb6xOXH3yzwWORbGRfy061AeC7EosH
x2pEw7Nk71xuJ+On
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:30 2025 by rpki-client