Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.cer (raw, json)
Hash identifier: Waq9tVKGkeRkmzoLuJvx9I2U141CsbgYwGEHI0d14nU=
Subject key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD091EAF14878EF4D62E4DB9432273
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 156.83.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:09:1e:af:14:87:8e:f4:d6:2e:4d:b9:43:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:7c:5d:fd:e6:63:5a:52:44:47:3b:02:71:
9d:65:37:d2:32:9f:9b:56:67:7d:77:5c:a8:65:b9:
81:ac:8f:1f:7c:ed:17:e5:71:60:41:f6:21:71:09:
3c:df:02:eb:47:56:60:12:3f:2f:b9:07:d6:b1:c3:
87:08:d5:4d:67:9e:95:af:98:e7:41:d7:30:b3:77:
aa:27:d1:d4:a6:e9:7f:1d:32:4c:19:21:57:bb:06:
93:7f:61:4d:c0:26:f2:af:4c:57:73:e8:ee:86:a2:
07:7c:5c:2d:29:72:ec:4d:15:d8:a3:00:cd:78:5f:
40:6e:df:7f:0f:92:bf:dc:f0:c8:09:01:8c:62:57:
34:9c:8b:bc:2d:36:a0:06:bd:54:6d:2c:0c:a0:5f:
97:78:d3:91:06:58:fc:45:b6:dd:74:6b:1e:a0:29:
66:8c:c2:a1:61:b1:52:1b:e5:cf:a7:74:f9:d9:4e:
da:2f:df:c5:28:56:9a:c9:8a:b5:d6:41:bf:57:c1:
28:ed:05:56:93:7b:a0:d8:6e:77:f4:21:c8:92:4d:
36:e5:b8:87:39:3f:c6:d5:ac:90:b7:22:ed:ec:ca:
c5:85:21:e0:f2:27:22:a4:73:dd:af:df:28:3d:0b:
09:d4:27:76:6c:61:57:7e:8c:65:bb:00:c2:08:9d:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:83:d5:49:d0:f3:9c:2b:7a:46:ea:92:e8:71:a6:24:ec:1c:
61:e1:48:74:d8:95:b6:da:6b:fd:cb:bf:a3:fd:39:9c:e6:02:
4a:7b:14:4e:a2:34:18:73:d4:16:6f:57:63:1c:61:19:e7:13:
56:35:d8:f5:e0:3f:5c:c0:19:16:f8:c2:19:bc:e5:15:fb:b4:
99:be:50:31:6a:76:fc:13:8f:65:44:9d:17:34:27:be:aa:6e:
dd:83:59:10:9f:ac:f2:4a:8a:be:53:c2:e6:f4:43:83:ca:f7:
0d:e8:b7:51:7a:9c:d2:10:8a:e6:3c:d9:c7:72:9d:9f:cc:7a:
91:87:9b:e2:86:68:dc:3f:b5:d4:3f:3c:05:08:11:79:39:a2:
bd:1a:ab:cf:b5:f9:1f:64:12:3e:ac:7d:11:b5:6c:2e:68:8d:
eb:a6:be:c8:ca:67:01:e3:0e:f0:35:d4:60:2e:1d:0f:84:7d:
4c:dd:ed:4c:37:04:9e:e1:a4:e9:c9:61:78:22:a8:59:8b:1e:
ca:d7:c2:b6:f7:ea:59:3d:e1:9f:38:af:69:ad:39:df:47:1b:
dc:c0:42:44:79:a6:a9:58:7f:e3:ff:e3:a0:16:32:d3:b2:01:
84:77:b7:83:df:a4:97:94:6c:42:9b:19:7a:8c:d9:6b:c9:28:
d3:a9:03:a0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzF3QkerxSHjvTWLk25QyJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGYxYzg3MjRjYmJkMDM0YmFiN2EwZGFkZjBhYjRiOTlmZjY2ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW18Xf3mY1pSREc7AnGdZTfSMp+b
Vmd9d1yoZbmBrI8ffO0X5XFgQfYhcQk83wLrR1ZgEj8vuQfWscOHCNVNZ56Vr5jn
Qdcws3eqJ9HUpul/HTJMGSFXuwaTf2FNwCbyr0xXc+juhqIHfFwtKXLsTRXYowDN
eF9Abt9/D5K/3PDICQGMYlc0nIu8LTagBr1UbSwMoF+XeNORBlj8RbbddGseoClm
jMKhYbFSG+XPp3T52U7aL9/FKFaayYq11kG/V8Eo7QVWk3ug2G539CHIkk025biH
OT/G1ayQtyLt7MrFhSHg8icipHPdr98oPQsJ1Cd2bGFXfoxluwDCCJ0fkwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFG3xyHJMu9A0ureg2t8KtLmf9m//MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2UwNzgx
Zi02ZTY0LTQ2YWEtOGFmMC1mOTI0ZDZmNmE1OTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvZTA3ODFm
LTZlNjQtNDZhYS04YWYwLWY5MjRkNmY2YTU5NS8xL2JmSElja3k3MERTNnQ2RGEz
d3EwdVpfMmJfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAnFMwDQYJKoZIhvcNAQELBQADggEBAGyD1UnQ
85wrekbqkuhxpiTsHGHhSHTYlbbaa/3Lv6P9OZzmAkp7FE6iNBhz1BZvV2McYRnn
E1Y12PXgP1zAGRb4whm85RX7tJm+UDFqdvwTj2VEnRc0J76qbt2DWRCfrPJKir5T
wub0Q4PK9w3ot1F6nNIQiuY82cdynZ/MepGHm+KGaNw/tdQ/PAUIEXk5or0aq8+1
+R9kEj6sfRG1bC5ojeumvsjKZwHjDvA11GAuHQ+EfUzd7Uw3BJ7hpOnJYXgiqFmL
HsrXwrb36lk94Z84r2mtOd9HG9zAQkR5pqlYf+P/46AWMtOyAYR3t4PfpJeUbEKb
GXqM2WvJKNOpA6A=
-----END CERTIFICATE-----
Generated at Fri May 3 07:51:52 2024 by rpki-client on console-fra.rpki-client.org