Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.cer (raw, json)
Hash identifier: gryjMjww8/R8idtgACtXbMKgzGVWaERd5HKXfIaWs7g=
Subject key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC22CB65B160C7DEA3DBB529EDC798
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34958
IP: 193.43.215.0/24
IP: 193.189.147.0/24
IP: 2001:67c:25e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:22:cb:65:b1:60:c7:de:a3:db:b5:29:ed:c7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:5d:d3:28:3e:d3:4c:d3:d1:3d:d7:77:02:
9a:fe:2b:8b:67:6b:b7:87:9c:11:ef:83:11:f6:d5:
7e:c4:5d:32:83:e2:55:46:3f:2b:9c:e1:64:d0:a7:
75:b7:5a:57:b3:7a:14:05:aa:95:66:9c:bf:9d:71:
6a:10:59:78:48:6a:27:06:8a:67:ef:e5:b8:1b:65:
17:a6:39:f8:a3:78:69:f8:fd:68:74:24:7c:e2:e8:
15:7b:ae:b9:de:f1:ff:16:09:ea:b0:b8:03:8a:69:
f8:b4:e3:59:4a:0e:23:04:58:b0:36:ca:02:3e:ad:
34:ab:30:11:6a:63:cf:ba:9c:10:80:49:65:f2:9f:
b8:03:4d:6c:9d:9d:a9:f6:f4:8a:4a:0f:6a:a7:fc:
b9:fa:1f:c1:82:c2:aa:e6:1d:11:76:f0:f0:fb:4a:
4f:1c:6f:93:c9:75:17:3b:57:04:2f:62:22:9a:90:
87:6b:f8:86:01:a9:50:d2:57:5b:8d:38:24:36:2e:
d2:bf:55:92:91:21:99:fb:45:c2:27:ef:fc:18:e6:
92:9f:f4:8c:13:98:d0:c6:b6:c2:f0:9a:6c:39:1b:
19:6e:99:7d:12:28:f4:8d:4f:da:61:fd:7c:9f:91:
b0:aa:90:3b:7a:94:a6:e8:86:c8:d0:31:97:12:46:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.215.0/24
193.189.147.0/24
IPv6:
2001:67c:25e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34958
Signature Algorithm: sha256WithRSAEncryption
1f:db:7c:80:69:d7:e5:73:78:02:91:aa:ef:b3:52:f7:22:3a:
63:eb:22:af:58:bd:9a:7d:88:6f:26:cb:17:fb:7e:12:79:46:
dd:b4:67:a0:48:d0:17:1e:8b:6e:c4:df:0c:10:8a:ad:77:25:
73:2b:b2:10:33:6a:74:40:30:d5:e2:99:fc:f5:91:2d:ba:d5:
bc:0d:3a:97:45:be:ba:bd:a6:5c:c8:83:e5:58:1c:05:67:44:
53:95:0e:31:79:ec:ba:65:b3:0b:21:2a:b4:f3:4e:4f:6e:3e:
b1:2d:85:8e:21:be:59:05:a6:5d:9f:a0:08:72:69:df:bb:ce:
ec:8b:e5:5f:58:2e:e3:ee:ea:b6:4e:8e:25:db:31:99:7b:58:
5b:5f:37:08:df:a4:db:b3:cb:34:f7:b4:99:b0:13:0c:b7:99:
bb:87:27:75:5d:48:8e:f9:5a:de:20:d4:61:64:ea:e0:43:6d:
e6:99:33:74:64:99:33:61:17:1d:e4:80:46:77:b5:56:d5:c9:
b2:6e:25:9a:43:2a:b6:92:4f:f5:84:85:ae:84:96:9c:fb:07:
65:1a:67:a2:74:9d:49:17:d7:9f:20:ba:89:55:c7:4a:b7:23:
d4:20:d1:3b:17:5d:cf:75:b7:1f:62:97:a8:b5:36:ff:d6:6b:
2c:b1:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:45 2024 by rpki-client on console-ams.rpki-client.org