Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.cer (raw, json)
Hash identifier: Uh1KFFoMlQ5sH1TzrDuiJ8x0NIl7QwZRS2DYq6+6nDg=
Subject key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF62D4F80ADEDE9142CF20FF6654A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60300
IP: 185.1.200.0/24
IP: 185.179.108.0/22
IP: 2001:7f8:10c::/48
IP: 2a00:4d60::/32
IP: 2a00:71e0::/32
IP: 2a02:48::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f6:2d:4f:80:ad:ed:e9:14:2c:f2:0f:f6:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d960197fe589214c2259f6aea896c4e1007e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:3b:26:09:62:65:ed:19:9f:d1:ab:95:27:
5e:78:ed:08:ca:0a:25:4f:23:8e:21:6f:02:2f:53:
63:c2:41:42:cf:f0:df:51:de:bd:58:a1:49:d3:bb:
e3:b4:d6:a3:c8:fc:21:35:3b:d4:85:c7:8c:99:aa:
f7:05:25:8c:ab:ce:bc:37:bc:22:14:55:da:6b:e2:
bf:9e:61:9e:73:7f:3a:95:da:fa:02:0e:da:b8:08:
36:90:2b:7d:07:d9:e2:32:43:a7:7f:3e:d7:7a:ac:
bd:44:07:2d:39:32:43:c8:b5:b1:48:24:0f:45:46:
36:30:97:b8:a6:66:b7:7c:46:02:ed:01:fd:1f:29:
58:68:6b:41:d3:05:0d:dc:d4:66:be:d1:ae:89:15:
b0:a4:54:bc:07:eb:a9:f6:b6:52:d1:a0:3d:a3:22:
9b:fd:6b:bd:8f:6c:71:a8:45:d9:2a:1c:fb:7d:c8:
1f:35:79:f2:e3:97:1d:6f:6b:2a:ef:7e:6c:07:d0:
c4:5e:db:64:8e:95:d5:84:48:9a:bd:44:5f:f2:4f:
91:54:67:f1:73:7b:c0:ac:11:e0:60:d7:69:3c:74:
eb:5c:4c:78:14:64:ef:a2:04:1b:80:da:0d:56:4a:
0a:2b:7b:83:b3:2f:9f:e1:39:2e:b2:c8:6f:dc:d8:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.200.0/24
185.179.108.0/22
IPv6:
2001:7f8:10c::/48
2a00:4d60::/32
2a00:71e0::/32
2a02:48::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60300
Signature Algorithm: sha256WithRSAEncryption
24:16:cf:ab:7b:90:c2:04:43:c6:da:ae:29:fc:bb:7a:f1:19:
3f:1c:fe:09:58:7f:e4:42:4b:94:4f:97:d7:a0:46:2a:47:3f:
7e:7b:32:c4:8f:22:eb:f9:3a:13:55:c0:20:25:97:93:51:41:
0c:3b:4b:6f:74:63:7e:d0:50:aa:ab:cd:a2:15:c7:fa:ba:20:
74:a2:8f:57:45:0d:34:7b:c0:55:d7:24:44:f4:35:66:be:62:
d4:4f:48:5a:62:b5:c5:5f:81:6b:cc:bc:f7:c1:4b:d8:41:cc:
b5:15:ce:44:3c:d0:7a:9f:22:fa:d1:3f:29:ec:5a:43:7a:f8:
e0:21:48:a8:a3:6c:3e:98:fc:bf:de:a9:64:ac:64:04:e3:30:
16:87:70:29:67:c7:7f:d5:9d:7e:1a:ba:a3:84:39:13:65:3d:
5e:b6:40:5c:19:89:a2:3b:ab:12:6f:a1:ab:f9:d5:df:c1:ae:
7c:b3:b2:00:83:51:e6:e4:7a:3e:d2:4b:dd:af:5c:26:c9:5a:
80:a0:d0:c0:14:40:44:32:ec:1d:39:51:72:5c:af:90:15:25:
d7:e5:d8:57:5e:40:4b:e7:2d:c4:54:74:2d:59:06:c0:61:24:
a1:2d:41:bc:11:9b:e8:7c:23:a3:ec:1f:5a:c6:9a:c6:fc:9a:
bf:b7:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:50:25 2024 by rpki-client on console-fra.rpki-client.org