Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.cer (raw, json)
Hash identifier: SpYmKL6mzu/m57a498fjsuh+YzE9qvEhKjhq1BsvIWE=
Subject key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368F3F8CDA7AEF3D6AB21C177E9D075
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34958
AS: 35189
IP: 193.43.215.0/24
IP: 193.189.147.0/24
IP: 2001:67c:25e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f3:f8:cd:a7:ae:f3:d6:ab:21:c1:77:e9:d0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:5d:d3:28:3e:d3:4c:d3:d1:3d:d7:77:02:
9a:fe:2b:8b:67:6b:b7:87:9c:11:ef:83:11:f6:d5:
7e:c4:5d:32:83:e2:55:46:3f:2b:9c:e1:64:d0:a7:
75:b7:5a:57:b3:7a:14:05:aa:95:66:9c:bf:9d:71:
6a:10:59:78:48:6a:27:06:8a:67:ef:e5:b8:1b:65:
17:a6:39:f8:a3:78:69:f8:fd:68:74:24:7c:e2:e8:
15:7b:ae:b9:de:f1:ff:16:09:ea:b0:b8:03:8a:69:
f8:b4:e3:59:4a:0e:23:04:58:b0:36:ca:02:3e:ad:
34:ab:30:11:6a:63:cf:ba:9c:10:80:49:65:f2:9f:
b8:03:4d:6c:9d:9d:a9:f6:f4:8a:4a:0f:6a:a7:fc:
b9:fa:1f:c1:82:c2:aa:e6:1d:11:76:f0:f0:fb:4a:
4f:1c:6f:93:c9:75:17:3b:57:04:2f:62:22:9a:90:
87:6b:f8:86:01:a9:50:d2:57:5b:8d:38:24:36:2e:
d2:bf:55:92:91:21:99:fb:45:c2:27:ef:fc:18:e6:
92:9f:f4:8c:13:98:d0:c6:b6:c2:f0:9a:6c:39:1b:
19:6e:99:7d:12:28:f4:8d:4f:da:61:fd:7c:9f:91:
b0:aa:90:3b:7a:94:a6:e8:86:c8:d0:31:97:12:46:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.215.0/24
193.189.147.0/24
IPv6:
2001:67c:25e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34958
35189
Signature Algorithm: sha256WithRSAEncryption
a6:c8:87:aa:77:60:aa:14:65:07:8d:ce:4f:9e:cb:26:2d:12:
e1:ec:53:a6:98:a1:e6:42:8a:6f:17:28:7a:a8:31:e2:66:2a:
c0:3d:1e:93:99:be:10:df:6c:1d:96:54:ab:fa:24:03:22:88:
1b:31:76:c1:45:cb:8b:02:c1:cb:17:bd:e3:86:9e:a2:6e:45:
15:5c:b6:0f:7f:98:db:b0:68:ec:fa:53:8c:08:13:6e:b9:15:
69:90:26:cd:d9:bf:26:f4:30:7e:7c:97:70:58:8d:41:b7:35:
2b:9c:44:a0:10:53:83:71:7c:92:cd:f7:2c:ee:c5:40:94:47:
5f:2c:b7:80:b2:d2:62:0e:05:aa:be:62:a3:e4:78:4d:ea:c1:
9f:42:1d:90:bf:13:95:ea:ef:7b:11:a2:45:14:b9:c4:54:e3:
ef:98:19:19:80:ed:88:c3:cc:e7:da:f3:6e:10:42:7b:38:a7:
27:89:20:70:c7:0f:53:64:66:ba:9b:72:3e:58:a1:60:57:84:
fd:58:c7:d2:68:fc:93:99:42:cc:4b:c1:74:ee:43:6a:96:b1:
af:0c:92:70:93:50:2b:91:33:5c:18:5a:64:92:39:76:c1:51:
0b:ea:3f:a0:fe:9f:b4:bf:3b:96:0a:ad:05:01:1b:58:26:f0:
43:5d:e5:1d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQjaPP4zaeu89arIcF36dB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQ4OWZlMWM3ZTIwYTBiMGM2Mzg0MmM0NWMxNmM1NzYzMTc4NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRJd0yg+00zT0T3XdwKa/iuLZ2u3
h5wR74MR9tV+xF0yg+JVRj8rnOFk0Kd1t1pXs3oUBaqVZpy/nXFqEFl4SGonBopn
7+W4G2UXpjn4o3hp+P1odCR84ugVe6653vH/FgnqsLgDimn4tONZSg4jBFiwNsoC
Pq00qzARamPPupwQgEll8p+4A01snZ2p9vSKSg9qp/y5+h/BgsKq5h0RdvDw+0pP
HG+TyXUXO1cEL2IimpCHa/iGAalQ0ldbjTgkNi7Sv1WSkSGZ+0XCJ+/8GOaSn/SM
E5jQxrbC8JpsORsZbpl9Eij0jU/aYf18n5GwqpA7epSm6IbI0DGXEkaCMwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFG5In+HH4goLDGOELEXBbFdjF4XTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2Y4NDE5
OC0yYmRiLTQ0N2QtODcyMi1kODg2OTMxMTQ5OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvZjg0MTk4
LTJiZGItNDQ3ZC04NzIyLWQ4ODY5MzExNDk5YS8xL2JraWY0Y2ZpQ2dzTVk0UXNS
Y0ZzVjJNWGhkTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQAwSvXAwQAwb2TMA8EAgACMAkDBwAgAQZ8Jegw
HwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIiOAgMAiXUwDQYJKoZIhvcNAQELBQAD
ggEBAKbIh6p3YKoUZQeNzk+eyyYtEuHsU6aYoeZCim8XKHqoMeJmKsA9HpOZvhDf
bB2WVKv6JAMiiBsxdsFFy4sCwcsXveOGnqJuRRVctg9/mNuwaOz6U4wIE265FWmQ
Js3Zvyb0MH58l3BYjUG3NSucRKAQU4NxfJLN9yzuxUCUR18st4Cy0mIOBaq+YqPk
eE3qwZ9CHZC/E5Xq73sRokUUucRU4++YGRmA7YjDzOfa824QQns4pyeJIHDHD1Nk
Zrqbcj5YoWBXhP1Yx9Jo/JOZQsxLwXTuQ2qWsa8MknCTUCuRM1wYWmSSOXbBUQvq
P6D+n7S/O5YKrQUBG1gm8ENd5R0=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:33 2025 by rpki-client