Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.cer (raw, json)
Hash identifier: fkx9e7nNTEiz5zhrubMCSWwBbROoSqp8RWgkAF9cifg=
Subject key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4F973CF52ECFF6C0A9B9A88B64DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.116.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4f:97:3c:f5:2e:cf:f6:c0:a9:b9:a8:8b:64:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cbc8402f092343b9c03d386069728f8983e6008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:c6:ad:24:95:02:e9:f5:25:6a:a2:3a:54:
ca:2f:f5:01:3c:0f:11:5d:04:49:d7:9d:db:56:ef:
48:9b:d4:79:e2:cf:cd:13:06:ae:77:22:4c:1e:84:
eb:d7:44:3a:3f:83:9b:9d:2e:ff:07:6d:9c:74:e9:
11:d2:05:66:71:f2:42:c9:59:94:e4:54:b3:eb:d8:
96:20:aa:8d:88:9e:8f:7c:94:33:af:5c:67:66:fe:
79:d2:f4:ab:68:cb:fd:c6:5c:d3:37:d1:03:2d:89:
70:7b:8b:5d:e1:e7:65:e7:b5:b6:61:ec:ba:92:f5:
8b:96:eb:85:b4:a4:ee:42:7d:c0:27:61:b5:7f:20:
96:ae:2b:a1:7d:84:cc:60:4d:99:d5:35:14:87:f4:
6d:b5:6c:7b:f6:c3:df:92:38:b7:96:68:20:57:53:
8d:6e:a1:90:13:37:03:59:13:95:82:eb:4e:5e:19:
d6:8a:82:0b:6c:ff:f4:3d:e6:15:24:fe:07:53:0c:
fa:f5:de:5c:96:38:94:44:1b:a0:4f:33:95:96:fe:
c3:08:1c:e3:33:9d:ab:c0:9e:24:27:1b:22:a8:66:
02:c8:26:9a:f1:1c:c0:0e:2a:ac:ac:af:43:12:bc:
0a:ab:4e:da:a6:cd:05:56:7b:19:6f:f5:0c:3f:05:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bf:fe:23:b5:f6:77:50:6e:86:1a:83:4c:f3:f0:c7:4b:66:
18:b9:3a:6a:b3:2a:30:3a:c8:15:bb:eb:9a:93:f3:18:09:75:
17:21:3f:d3:2c:0e:2e:9a:b0:2e:2d:7b:08:8d:8a:40:4f:84:
3c:f5:8a:2c:46:4f:66:56:02:f5:95:e2:a6:bf:b0:7b:c6:0e:
bc:79:fe:7f:b8:6e:e5:59:e4:e4:6e:d5:b7:9c:cb:26:7c:3b:
2d:95:7e:d8:76:c9:93:4e:98:1a:3b:85:e0:6d:63:3f:33:01:
7c:e7:55:b3:6b:3e:7c:de:5f:8c:be:8a:b6:9c:18:b0:fb:7f:
65:e3:30:d1:3c:16:1b:ef:5d:3d:e5:0e:56:50:61:e2:5c:20:
80:92:f4:a2:d7:9d:95:c4:d0:9d:9b:a1:77:3d:ee:fb:82:06:
dc:e5:9c:20:b3:c2:fe:80:46:2b:13:63:d2:a1:34:d5:18:81:
ab:ee:c3:03:06:c3:e1:78:d4:5d:7b:0b:4a:c2:fd:04:f0:0b:
9c:5a:5a:d4:8b:a6:82:7b:08:1a:a8:59:df:1f:96:5d:31:b8:
53:95:cd:9c:29:e7:69:5f:92:7a:35:92:61:c7:dc:d3:ca:6a:
e1:fb:78:97:ca:4a:22:0b:d5:49:a6:6d:ba:34:61:32:65:2d:
ab:fb:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:32:46 2024 by rpki-client on console-fra.rpki-client.org