Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer (raw, json)
Hash identifier: SeNQLqS7nEhVObyy5zG80K+M4B0QdzzjTD3XM5Z1vx4=
Subject key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E6BE2E0B890D3E6602D9A9E3D95DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44879
IP: 193.47.168.0 -- 193.47.183.255
IP: 194.124.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:e2:e0:b8:90:d3:e6:60:2d:9a:9e:3d:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:73:8f:9e:fb:cd:4a:ce:78:5c:b6:9c:d1:
b1:87:e3:a4:70:9a:df:d0:33:3a:f2:8e:20:2f:77:
cf:91:ae:fa:1b:74:12:41:d4:d1:53:19:03:1a:3e:
ee:56:b4:b4:97:09:cb:bb:cb:f7:d2:8f:e7:5a:98:
ed:55:64:d8:e2:c0:cc:6e:a1:9a:f4:7e:f8:0b:9b:
d7:e8:f8:ce:1a:c0:44:cf:13:c6:6b:e6:ac:2c:21:
b5:4e:7a:b2:d1:3e:04:4b:e6:48:61:7a:bd:5c:36:
d3:e8:4f:5a:35:cc:39:da:82:83:a7:ba:5a:a8:ff:
ee:ca:1a:30:77:d5:de:4b:bb:3f:31:84:28:77:86:
bc:fc:db:5c:60:46:6d:77:2f:c1:45:50:92:eb:f5:
e3:98:32:01:de:7d:6c:f0:1c:37:b4:a0:57:83:f0:
d8:32:b0:9d:d2:ad:ba:a3:49:b7:45:be:1b:44:21:
3e:52:62:e9:5b:f9:51:ee:95:21:f6:3f:8c:57:66:
10:e0:9e:c3:66:cd:e1:3b:c3:9f:be:57:e2:7f:f1:
2c:05:fa:8b:74:fd:a8:64:44:6f:3c:31:b1:83:95:
74:13:fa:2a:9a:91:fa:fa:b8:31:4e:f7:f7:12:4d:
67:6c:6d:a0:1b:40:03:32:5d:44:95:8c:d1:d7:d6:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
194.124.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44879
Signature Algorithm: sha256WithRSAEncryption
8b:37:ba:85:71:15:ef:3b:0a:cd:52:8f:f4:10:45:60:75:43:
dd:03:f6:c1:9a:55:94:2c:9f:a0:70:ec:51:c8:af:55:8d:9c:
30:16:46:a6:3e:35:6c:41:05:65:84:c1:25:e4:53:b1:38:3c:
18:f9:dc:4f:0f:c1:e9:d3:03:b5:d2:ed:d8:68:5d:9c:1f:65:
6e:2d:9f:93:ba:3a:50:ae:b2:bc:7c:6d:48:ef:b1:2b:1c:0e:
f8:db:36:f6:87:04:12:b4:74:84:c7:b5:f1:79:e1:84:c1:2e:
be:82:38:0e:72:01:64:ad:50:5b:c6:fc:98:ee:76:1f:15:b5:
cf:1b:9e:31:5e:ee:74:a0:2c:2b:ea:54:40:b7:4f:b1:30:25:
68:5a:8f:64:43:c6:cb:79:b6:f0:79:29:18:38:12:94:56:4e:
c9:33:e9:83:df:3f:f6:ce:68:bd:7f:80:93:f0:2b:9b:64:f9:
f8:57:f2:8f:76:96:4d:e1:e1:60:40:db:5b:4d:de:90:26:e2:
21:70:22:4e:13:e6:fc:be:8d:dc:46:21:5e:3f:97:73:36:e6:
1e:f0:01:28:55:37:1d:cf:92:ca:15:da:75:73:2d:51:52:3c:
c6:3c:45:b7:c4:b0:f7:89:43:78:12:75:95:75:3d:4a:21:98:
79:ba:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:08 2024 by rpki-client on console-ams.rpki-client.org