Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer
File: bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer (raw, json)
Hash identifier: gYonlbWfgpVcYnkH+k1s8RnJEx+Yeh1G9RufPeDlz8k=
Subject key identifier: 6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F157BC24C8566ED077571A4CCCA0F81F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Apr 2024 13:39:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 188.95.8.0 -- 188.95.13.255
IP: 2a00:1010::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:7b:c2:4c:85:66:ed:07:75:71:a4:cc:ca:0f:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 13:39:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e1a5543a72b515787f29e84f8f1ab4fd2f1bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:0f:66:1a:17:4f:8c:a7:05:69:38:1a:19:
22:6f:54:a7:ec:33:5e:d2:d3:38:6e:98:a2:06:38:
1b:43:7c:a3:1a:19:18:6a:1d:9e:dc:4b:da:9a:f3:
a0:74:3f:5d:d4:fb:c7:ce:e1:1e:93:fa:06:f7:24:
ad:8f:6c:34:70:43:23:4d:a7:60:e2:d5:84:81:8d:
70:24:a2:a4:e9:6e:19:3b:f6:8c:d3:c0:5e:d5:7c:
ce:3e:e1:6b:ed:01:14:3a:c3:d2:a5:a4:83:4b:1f:
cf:86:c0:66:bf:2f:71:ac:1c:57:c5:bb:ac:d1:eb:
5f:cc:eb:25:ce:2d:c5:ae:f6:83:a6:dc:17:58:f0:
97:03:ef:3f:e2:44:84:f8:af:aa:02:e4:46:bf:96:
5c:f8:2f:78:ed:ff:e0:63:f5:20:44:9a:37:e6:c3:
0b:74:70:43:f1:ab:f2:27:3b:9a:dc:6e:a3:09:08:
e6:01:8e:e4:14:41:95:3e:b2:9a:03:ea:f1:7e:62:
59:58:84:51:cb:18:b2:81:b7:bc:02:a2:fa:ac:21:
67:62:93:5a:87:9b:23:d3:8c:99:5f:37:53:f6:9d:
6e:e1:58:b6:45:6c:d9:49:39:8c:fb:fe:3f:e0:2f:
d8:96:66:d3:bf:3a:e3:c6:0b:f9:c5:84:4a:5e:4c:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.8.0-188.95.13.255
IPv6:
2a00:1010::/32
Signature Algorithm: sha256WithRSAEncryption
13:f7:11:34:7c:a7:6a:ab:a7:d3:6d:44:5c:30:5f:0f:24:a1:
ab:77:7a:90:2f:da:c0:41:e3:be:0c:c1:e8:db:a9:a7:ac:eb:
6d:c9:89:0d:b4:28:ab:b7:d7:80:d7:81:cc:76:0c:5e:9e:be:
87:21:df:48:c3:1c:5b:79:b5:11:24:c8:5f:43:ce:64:a7:61:
50:d6:2d:29:c2:99:fa:21:db:f2:0f:06:5a:c3:e6:88:5e:6b:
6f:51:89:eb:b0:aa:0b:94:b1:02:30:0a:c7:6a:1b:2d:7c:4c:
37:83:ba:93:6a:ce:fb:a8:dd:4a:fa:a0:82:5e:3a:2a:8d:1b:
31:92:46:cf:99:76:65:13:70:ef:3b:b0:33:5b:4e:ea:75:ea:
74:c7:5d:51:93:ce:4a:d7:fc:57:3f:47:71:3d:83:8a:1d:62:
67:c9:55:75:bb:2d:c1:77:cc:e5:2c:cb:fb:ec:56:3d:43:09:
38:f5:b5:5b:ea:b0:d7:49:7c:a1:d9:af:84:e2:5c:4e:40:36:
c5:b6:8b:32:37:2b:70:3e:36:67:90:d7:31:7b:63:db:00:b9:
8c:6c:98:cd:dc:5e:fe:aa:fd:b0:62:dc:60:cb:61:dd:2f:03:
f5:bf:f0:dc:4c:90:72:c7:b2:4d:78:a6:59:86:1d:fc:b8:28:
a1:e9:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:12:06 2024 by rpki-client on console-ams.rpki-client.org