Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
File: bXoBv9NLsT37elNXId7EAc2TEtk.cer (raw, json)
Hash identifier: w7myDc+gV/uegcSSAaFItZ3bXNErPviqYdo1R+jh+ME=
Subject key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B73BBF89E0E37484FD87346E39D26F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.116.26.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:bf:89:e0:e3:74:84:fd:87:34:6e:39:d2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:76:be:11:f9:24:81:2a:12:d5:d3:43:71:
c5:31:6f:66:83:bb:96:7f:6d:e2:19:2e:b1:44:db:
99:cb:37:76:54:25:ec:d1:ec:ab:07:83:d2:e8:23:
07:3f:11:a5:3b:73:9a:aa:36:be:6b:ae:90:2e:05:
1e:03:c1:bf:ae:ad:9a:a4:54:63:a3:c5:09:8d:1e:
ca:1f:bc:8d:7c:5a:4e:52:2c:1d:9f:b7:89:07:80:
2f:64:f0:a3:25:3e:26:2a:70:65:04:49:8d:c5:75:
aa:36:de:c7:89:9b:87:c4:c6:b6:c7:b5:2e:cc:d4:
9f:31:36:46:c9:1f:dc:9a:95:29:7c:6d:fb:d0:43:
df:75:17:32:f2:2d:da:dc:16:a9:1e:83:18:b1:8c:
79:55:ff:9a:8e:63:58:bc:19:18:ab:ec:fd:f0:84:
ca:ed:fc:c4:a2:ec:00:0d:36:6e:09:0b:45:a8:64:
b5:62:9b:27:30:e1:e9:c6:68:4e:5d:48:cc:cc:96:
97:37:7b:9e:37:9d:16:20:38:36:9f:2a:21:60:d7:
15:2f:0e:5a:5f:af:9e:84:7e:07:e0:d4:a1:2c:df:
e6:18:be:40:cd:d8:bc:bd:14:7d:93:b8:eb:ce:91:
70:99:42:6c:28:b9:47:e2:cf:0e:23:c6:2b:e0:42:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dd:87:de:9b:5f:c5:0c:51:26:04:cd:2a:25:12:8a:73:05:
12:3b:1c:8a:d4:d2:6c:2e:3f:3f:32:ee:ef:88:41:d4:b4:33:
c0:86:19:d4:be:5e:c4:5a:ba:fa:32:e5:ee:bb:da:1b:86:5d:
70:17:41:22:73:26:87:8c:05:64:17:51:be:5c:f5:d5:ad:c1:
76:96:53:12:62:b8:1a:86:e3:33:e5:56:8a:32:4d:b6:36:6d:
d5:c7:25:74:0d:b2:26:e8:4c:b1:94:25:96:16:eb:53:e6:1d:
3c:65:b0:f5:58:8c:49:ac:85:45:56:99:17:34:45:5c:ce:fb:
aa:cb:bf:4d:f3:08:e2:ef:8e:a6:8b:48:af:2c:76:1b:b2:e7:
72:96:b2:7d:09:7b:a1:9e:7f:dc:93:c1:fd:cd:03:3b:40:c1:
50:a7:24:6c:f5:74:6e:53:b2:03:da:a8:7e:c7:21:b6:3e:bc:
3a:ef:96:2e:f3:78:6d:e0:e2:71:18:70:3c:b8:72:3a:70:b2:
86:88:ed:10:fb:22:95:56:4c:19:29:97:18:ae:b7:ce:8f:cd:
df:b4:9e:93:06:3a:30:37:9c:0a:53:d8:3f:b3:3d:b1:7d:2d:
86:b9:18:3b:5d:ce:cb:db:90:7a:cd:fd:a5:34:79:0b:1b:62:
57:d1:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:54:38 2024 by rpki-client on console-ams.rpki-client.org