Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
File: bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer (raw, json)
Hash identifier: bFP76a9YGVrJLN6gtX0uAdQYBYcXRlAgTa+L8giQtLI=
Subject key identifier: 6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000A28D1A44C6010CEA470E5C54428
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207871
IP: 2001:678:b7c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0a:28:d1:a4:4c:60:10:ce:a4:70:e5:c5:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ccf884cf78ec531986e46ede02fc68861965381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:55:69:b6:1c:5a:8d:d9:03:8e:bf:7f:d3:
7f:8f:9d:f4:65:67:76:e9:3f:1c:ab:fb:5b:9f:d5:
ce:83:88:4a:0b:92:b4:c3:04:c3:3f:31:a1:90:87:
bd:e4:2d:30:91:0f:b9:1b:a9:56:ba:65:ea:f3:ef:
01:aa:f8:f0:b5:26:be:5f:38:fe:ab:c7:1e:47:ec:
59:9c:59:65:07:18:ec:e5:e1:97:4c:bf:57:a7:5e:
4f:fc:d0:f6:dc:04:77:a2:b4:4c:62:55:0f:b2:d7:
9f:47:77:fe:61:92:f1:c9:2f:6f:01:67:e9:c5:1f:
76:f4:bc:e0:54:1e:2a:f1:23:e5:68:81:b7:0c:ff:
76:c0:89:bd:eb:30:5a:2a:54:4d:d1:a8:c9:f7:f4:
32:58:e1:a2:e8:f4:26:b5:14:71:88:1d:c1:89:dd:
e9:50:89:71:e7:36:ba:bc:ac:fd:dc:a1:46:d4:0c:
71:fb:80:b5:ad:f6:b0:28:f4:a1:ac:3b:b7:d6:cd:
e4:b7:9c:6b:7a:16:6c:d0:16:b1:d8:32:7d:42:d1:
d9:1e:23:3d:0c:a7:3b:cc:47:68:05:8f:0c:82:2a:
0b:55:d4:24:72:2a:b7:55:d8:b4:ec:e0:a6:2f:13:
ba:98:9f:b2:ab:21:ea:72:6d:5a:b9:96:9d:0a:dd:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b7c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207871
Signature Algorithm: sha256WithRSAEncryption
39:d2:eb:8f:0d:11:47:72:74:4e:93:35:81:b7:fe:86:64:79:
17:01:b1:68:22:74:05:bc:a6:a6:65:cb:04:ff:c4:87:80:05:
7f:2e:e3:dd:81:d8:93:76:9e:0b:6e:5f:ca:61:54:37:e4:a2:
49:98:14:3a:40:f3:75:1b:51:9a:c8:89:02:23:d6:fc:c8:42:
5f:de:2e:16:5c:c1:bd:74:7e:59:da:53:1a:0d:4c:18:81:c0:
b0:56:c0:86:4b:32:e1:04:06:30:d8:c7:e8:79:ec:59:29:06:
dc:5c:c0:03:10:01:fd:3f:6f:e6:b2:0c:ef:04:0d:d3:4d:92:
8d:02:c7:cd:d7:bc:50:42:ae:38:93:53:36:c5:50:24:1b:ab:
b9:66:28:b8:b5:a8:b9:0a:c7:cc:1e:1e:e3:7f:ee:09:b7:60:
03:b3:17:f6:10:6e:4f:75:08:bb:07:e9:e3:98:46:a8:2f:c1:
ee:c5:5f:09:75:b6:f0:e9:c1:09:c1:81:52:69:da:72:72:6d:
38:cf:39:d2:74:0c:51:7f:28:cf:52:a2:90:2c:ec:28:2e:cb:
10:a3:8b:fb:57:12:a5:23:2a:ed:32:36:93:db:c9:79:91:42:
08:7d:74:cc:00:a7:7e:b0:cf:f1:bf:ed:c9:73:4e:ed:9d:f8:
f0:44:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:14 2024 by rpki-client on console-ams.rpki-client.org