Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
File: bd1AUuD8dlNjYcu9x3UId93zYK0.cer (raw, json)
Hash identifier: VFYwtD+JVtuFOc77mszhHt4eCV7rATJpNoD0t162rTY=
Subject key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50110AF0BC5764C0C418BBDCCC9A470
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210874
IP: 45.10.100.0/22
IP: 2a0e:3700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:10:af:0b:c5:76:4c:0c:41:8b:bd:cc:c9:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:c9:1d:d2:5a:8b:4c:12:2a:aa:cf:c0:62:
39:3c:a0:14:98:02:52:4d:e6:40:8d:a2:ee:fc:2f:
48:37:66:ec:16:53:e8:9d:ca:48:4e:f7:6f:08:f3:
f8:06:1c:d5:69:d9:cb:b0:0a:3c:97:d8:3e:10:8f:
5e:e5:62:84:a7:d2:4a:ee:a8:d6:4e:69:29:c1:a8:
ce:29:21:48:91:5a:3c:57:74:a1:67:ef:17:4a:64:
5c:76:d4:b2:7c:fa:08:2b:1c:2d:96:be:e0:cf:57:
82:a8:fd:39:93:12:b5:6e:53:39:5b:0c:b1:0b:2b:
88:b8:55:13:5b:93:29:5b:df:cd:82:71:17:6e:d9:
74:e0:59:57:ef:2d:73:85:fd:da:c6:90:d4:97:7c:
54:2c:d1:67:a8:64:11:3a:3e:6d:4e:c2:ab:d3:4b:
af:25:87:ae:f4:43:fd:42:e7:30:bb:07:01:00:a6:
61:07:a5:e6:cd:d4:cd:e5:3b:5c:fe:0e:74:98:15:
0c:dd:44:29:5a:b6:9d:c1:0a:c1:b5:55:10:64:b9:
8d:fe:08:c8:f3:9a:24:21:bd:c4:50:10:18:a3:97:
7a:eb:de:61:e9:c9:a6:f9:24:19:f8:80:83:30:91:
72:9f:32:32:5e:20:ec:0e:cb:26:52:52:e6:fa:3f:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.100.0/22
IPv6:
2a0e:3700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210874
Signature Algorithm: sha256WithRSAEncryption
8e:e9:59:2e:a1:ad:cb:ab:19:1f:27:2c:d8:43:ca:d5:ce:af:
1a:a8:be:3c:94:58:d7:0c:6c:70:0e:2c:d5:5d:94:1e:56:21:
b5:03:22:92:05:4a:6a:bf:83:94:80:17:62:63:c8:a3:b4:8d:
29:2b:f2:5b:e7:5e:24:f2:48:20:39:04:9a:b8:cc:3d:b1:0d:
f7:40:a8:4f:4b:15:42:6a:ca:ca:2c:9c:d7:b2:e2:e9:f6:59:
7b:07:42:c6:65:c5:36:47:ff:03:b8:05:92:24:98:a8:d4:d2:
8e:31:8a:b4:84:67:39:31:e1:e7:5f:58:f7:48:ef:3d:6e:10:
42:9d:8e:65:09:19:67:f9:ca:4a:02:f7:24:3e:7d:18:a5:46:
6e:d8:01:82:f0:72:1a:9d:3a:c4:db:c1:54:24:14:de:b0:80:
3f:3f:ce:bf:d2:ee:e2:85:c1:4a:d0:1e:46:e7:f0:46:f5:b1:
71:53:ff:d1:03:d7:7b:e1:02:8f:6a:8e:bb:0c:4b:4c:dd:50:
c3:e0:23:4c:ec:98:0e:90:4c:8b:c7:6c:eb:43:ae:7b:95:96:
17:c0:4a:3e:c8:a4:6a:ae:3a:10:0d:20:8a:bf:c8:06:e7:95:
a8:d9:92:0d:dd:42:ec:f7:4f:9e:c1:ef:67:95:b4:93:e9:3d:
c8:eb:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:11:43 2024 by rpki-client on console-ams.rpki-client.org