Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.cer (raw, json)
Hash identifier: iC33E9YoR74kUE1PdpvVWj/q4AoVordOu/ygQtoaFpQ=
Subject key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49325CC385CD6CB446121FD96CC4B5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199889
IP: 185.207.20.0/24
IP: 2a13:ca00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:25:cc:38:5c:d6:cb:44:61:21:fd:96:cc:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dc85b6788e450c054134ae8c365748b23f74267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:93:c0:58:06:49:f3:b2:60:b0:8c:df:3f:
35:15:1f:25:8d:b5:33:6c:36:b6:08:d2:36:dd:32:
43:ad:3a:94:89:94:f5:09:02:45:36:2e:e3:c6:48:
49:b5:94:cd:ca:c9:4d:4a:98:6c:37:9f:02:9c:3e:
dd:c3:0e:d0:c5:ea:eb:bd:a6:bf:d7:94:98:d9:6e:
4d:67:76:18:0a:e8:e8:16:24:f5:60:86:96:8e:e1:
e4:7a:98:e0:2c:21:7b:6e:22:eb:60:ff:64:a3:4a:
77:28:c7:32:d7:9b:69:6f:2d:82:26:38:1e:04:6b:
4a:03:3a:95:f1:44:87:ef:d9:49:0f:45:af:b4:b7:
3f:d0:fe:37:23:4d:1e:a3:85:00:a9:00:30:54:b6:
f9:ef:43:4d:8d:f9:57:e5:aa:e8:20:3c:02:c6:1a:
c0:99:69:5e:b6:d2:a1:21:aa:5b:fd:e2:f0:54:a7:
4a:8d:f8:4b:1d:6e:20:e1:60:3d:29:58:7d:d2:b5:
46:59:1f:71:2d:3b:8c:79:24:54:c9:51:14:0a:76:
45:50:05:7e:1b:0d:6d:52:e8:88:22:1e:e8:c9:20:
98:96:35:5f:30:11:bd:b4:7e:2b:f0:a5:97:9f:d8:
24:e5:e3:c1:a3:a4:8f:85:c3:2f:a7:bb:8a:b7:b2:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.20.0/24
IPv6:
2a13:ca00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199889
Signature Algorithm: sha256WithRSAEncryption
64:89:61:41:4a:6e:34:70:40:18:2a:7b:e6:e6:90:c2:a0:bc:
7e:34:68:8f:0a:cd:e7:91:fd:f0:95:04:3c:49:00:31:ba:6c:
8e:c5:50:1b:15:33:71:78:cf:87:b8:27:cd:c5:dc:2b:2a:fa:
21:22:ce:be:5c:72:12:94:8a:74:03:14:79:9d:e3:19:35:cd:
4b:e6:5c:ad:d7:2d:7b:d2:5e:c1:a0:70:60:6c:c2:48:bf:2f:
ac:e0:24:87:c5:50:d9:6c:e0:26:50:88:61:b6:40:ce:84:82:
2c:84:90:74:0d:33:6a:6c:44:f5:5c:ba:e6:21:96:90:ab:f9:
c5:56:c3:98:aa:3d:3b:b8:c0:21:2a:5f:c3:f6:a6:33:b3:c6:
2a:f6:c8:bf:54:c3:51:13:fc:23:18:90:af:45:b9:aa:01:de:
34:b4:0c:e6:4b:f8:dd:29:c3:86:c7:73:1b:08:eb:30:d5:a9:
ed:98:d2:48:0d:69:a4:80:6c:5e:e5:49:48:65:fd:29:a0:f0:
e7:8f:0d:ff:17:ad:93:3e:5e:1e:10:f1:7e:08:f3:79:2f:c3:
ed:08:4c:cc:69:91:c5:f6:f9:99:f6:bd:fa:cd:d7:d9:7b:bc:
d6:59:3b:ac:e2:4f:35:64:88:0d:b0:14:cf:da:6f:ea:c7:b5:
67:e3:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:15:32 2024 by rpki-client on console-fra.rpki-client.org