Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNYFadP3ECjttTJJkowr7eWvA38.cer
File: bNYFadP3ECjttTJJkowr7eWvA38.cer (raw, json)
Hash identifier: tEcAM5tfD7u5kUyxpOO4501VjW4DqqlZr+GafX0+HpU=
Subject key identifier: 6C:D6:05:69:D3:F7:10:28:ED:B5:32:49:92:8C:2B:ED:E5:AF:03:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B250A071F1CA640673707D38581C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205422
IP: 217.18.94.0/24
IP: 2a12:c940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:25:0a:07:1f:1c:a6:40:67:37:07:d3:85:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd60569d3f71028edb53249928c2bede5af037f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:77:66:a1:d3:ad:de:01:d8:5a:df:e0:a5:
64:89:06:c4:9b:a3:8f:23:d5:b1:c4:76:90:1e:86:
95:d8:04:e2:52:c0:94:c5:fc:a1:d5:12:de:45:5a:
d7:15:de:63:b4:7e:f1:59:44:af:7d:0e:ef:5a:4d:
07:c5:95:8d:02:fd:4e:2a:cd:71:c7:4d:95:c7:eb:
d8:9c:79:ee:34:1d:16:ef:e2:9d:cf:78:6c:56:2b:
ae:8c:ca:7a:fd:25:88:55:a3:01:86:0f:50:33:91:
a1:5e:d9:8a:6e:28:15:53:34:0d:e0:a4:eb:39:d0:
9c:bc:ea:ca:d9:0e:12:7f:20:89:a1:df:f8:68:fa:
04:72:63:f6:10:fb:d0:2c:8a:90:e7:61:97:88:36:
b2:28:6b:09:05:93:dc:10:6e:2c:5b:64:f0:0a:20:
b2:da:36:f3:bd:98:6d:84:74:26:05:dc:62:8e:fc:
d8:61:32:8c:03:15:c5:c3:0d:c9:ae:82:b2:ca:51:
6d:b5:b1:a4:fa:d7:8b:5e:93:2d:9b:92:37:bf:5b:
95:8f:70:83:e0:75:cc:88:0b:79:64:e7:58:c1:06:
98:f1:e7:fa:72:82:28:61:c5:7a:89:4e:d2:ce:c0:
4b:6c:2a:32:62:6a:85:90:30:74:61:6d:4e:f4:f8:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D6:05:69:D3:F7:10:28:ED:B5:32:49:92:8C:2B:ED:E5:AF:03:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.94.0/24
IPv6:
2a12:c940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205422
Signature Algorithm: sha256WithRSAEncryption
11:e0:55:60:82:9a:4b:2e:14:e2:5a:2a:24:41:ba:8e:89:f6:
84:2e:ab:b6:8a:8e:33:8e:4e:69:6b:37:02:dd:b8:89:d6:59:
29:dc:5a:2b:85:28:f5:77:ca:a3:af:a2:74:0d:6b:27:8b:55:
7d:37:08:12:9e:48:3c:d6:49:5c:70:7b:e1:6b:25:aa:12:b9:
82:2b:a4:91:2a:1f:e2:94:cd:d9:45:cc:99:24:81:75:5b:47:
1b:13:1f:fd:0d:77:93:f6:3a:68:ba:a2:e1:7f:46:23:49:cc:
e9:ba:c2:0e:5c:aa:99:a6:d3:ef:c3:15:51:09:d1:5e:71:b9:
7a:47:a7:a2:0e:5e:9d:f4:d6:8b:77:a1:be:3d:09:06:1e:53:
e8:7b:cb:49:7c:08:c4:93:9c:53:bd:35:10:32:dc:81:db:29:
bd:e2:50:a4:86:14:cc:1f:f8:f8:12:05:67:ed:b8:09:c9:d2:
f1:97:24:54:bb:51:eb:51:db:64:33:9d:25:9d:a0:48:55:23:
a6:f7:47:60:5d:1d:49:d4:e6:9e:79:df:61:22:c9:fd:e3:14:
dc:78:5c:a6:f4:5c:e8:eb:e7:8a:0e:bf:a6:53:17:fc:52:ba:
85:59:44:db:bc:bc:dd:fe:7b:44:29:a6:26:8d:78:5f:1e:1e:
fc:6c:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:50:15 2024 by rpki-client on console-fra.rpki-client.org