Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer (raw, json)
Hash identifier: 2Fb7cdUW7PJEhdV+GgN5wjyEFF7LUtOIF6lIpQykpA8=
Subject key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E4019E4AA7ABFFB3569CF3F0EDD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39581
IP: 194.50.63.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e4:01:9e:4a:a7:ab:ff:b3:56:9c:f3:f0:ed:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:da:6f:5b:43:0e:1a:f8:77:18:7e:5b:d0:
23:ab:e5:07:fa:9b:31:b8:4b:27:77:6b:ff:60:95:
2a:13:81:ba:9c:d2:92:f3:5d:3e:51:48:9a:33:f1:
1d:0c:85:a4:3e:bd:41:34:0a:57:25:6a:52:24:2d:
d8:93:ad:aa:0e:07:fc:60:82:ac:0b:28:0f:10:79:
eb:48:6f:17:e8:c7:6a:e4:26:4b:bb:9d:0c:d8:91:
80:52:f1:7d:95:ac:b3:6b:37:bb:b8:38:2f:f2:db:
4b:bf:8a:e7:3d:fe:64:50:f7:41:97:55:f8:de:1a:
e8:da:75:36:b6:bb:28:18:bf:c7:53:1b:be:df:64:
e5:67:78:28:1c:4c:8e:7d:9d:45:9c:e4:d0:19:20:
be:0e:ab:ce:13:53:2e:99:95:bc:bd:cd:a3:a6:06:
a7:07:09:dc:01:9e:d3:1f:e7:1a:9d:7d:b9:78:eb:
25:8f:5b:ab:bf:f2:87:03:1c:cb:06:1b:2b:bb:24:
a7:4a:46:a2:ba:79:d2:80:bf:a9:aa:af:d2:a6:cd:
a1:25:7e:99:74:84:55:e0:c1:f5:e3:5f:69:75:0a:
15:18:ce:81:bf:e8:cf:72:9c:f1:3f:4c:2f:8b:e3:
7f:85:21:b1:b2:c2:51:7d:a5:d9:fd:0f:4f:10:bc:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.63.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39581
Signature Algorithm: sha256WithRSAEncryption
27:5f:51:d9:a3:3b:30:d7:34:98:fc:66:5f:aa:2a:05:b4:61:
08:c0:93:d1:04:75:45:fa:c5:69:c2:94:11:c1:91:8e:92:0f:
44:9f:2f:e9:4c:08:b6:d7:be:79:93:85:1d:5c:a1:fa:f3:70:
30:a7:ff:4d:2a:9f:66:e6:ee:6f:e1:07:fa:f4:4f:2c:b6:b0:
79:02:d9:d8:2f:ec:32:60:0d:21:39:7c:d4:b4:f3:d0:4e:ec:
fb:04:f1:64:22:2f:b1:49:93:eb:2a:bc:6b:16:4f:dc:57:ac:
59:f8:51:b5:11:19:d1:a6:b0:7d:4b:26:be:f8:4f:6f:50:5f:
d6:d5:e6:c6:a7:a2:4b:df:cd:ae:cb:13:d9:95:f5:5e:94:bb:
0e:62:60:57:82:bc:a1:64:ee:8c:5c:ce:19:24:15:94:68:36:
5c:bb:e8:5b:76:c9:17:e1:b8:25:57:5c:3f:44:fb:f0:38:16:
f1:00:b7:db:ad:7e:b2:88:cf:9b:8a:24:34:31:f4:28:d9:37:
6b:c4:b0:bd:1c:23:cc:2b:fb:56:5e:99:0b:af:7c:04:d4:7f:
da:5a:cb:3b:0e:11:11:88:1c:c4:b3:dd:21:92:b2:60:da:8d:
91:8d:7b:d3:69:d4:05:b9:27:b8:5d:b9:30:bd:9d:fb:73:72:
a9:fb:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:14:36 2024 by rpki-client on console-fra.rpki-client.org