Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer (raw, json)
Hash identifier: XbhDQYwUKpeog7EYjt1eyyzPHMWTQ61rXU0RCJaPUtE=
Subject key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0F0EC7EE9C7977850ED159ABC5798C6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 14:40:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215512
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:0e:c7:ee:9c:79:77:85:0e:d1:59:ab:c5:79:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 14:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:ed:9d:0d:cd:31:8b:77:28:af:f2:a3:fc:
0d:fd:85:0b:63:8e:a8:c6:71:2c:aa:45:e3:c4:32:
a5:60:71:54:81:cf:c4:69:49:33:70:80:9b:3f:26:
8f:b1:95:61:b4:ed:04:43:68:42:eb:d7:95:3e:cc:
55:29:d4:a9:e8:59:96:32:09:13:de:ae:9e:78:22:
a2:d7:43:da:d7:58:21:6e:da:1b:ea:14:5b:38:59:
1e:8c:cd:2c:a7:5a:d2:44:6e:98:ba:db:fb:97:9c:
d6:63:74:77:4a:b0:78:71:d0:f4:ca:a9:08:a5:f7:
2e:1c:78:d5:f7:3d:59:ba:83:52:0c:60:a5:8b:d5:
eb:1e:5a:cd:7e:38:e0:ce:93:35:55:0b:22:7f:d2:
5f:bd:31:80:43:fb:d1:a6:90:4c:0c:32:2f:21:3d:
7d:e7:5b:5d:4f:a5:86:f0:73:47:60:87:6d:e4:9b:
8e:aa:ea:ef:b1:e1:f7:c0:a7:26:19:9e:ae:9a:37:
1f:90:3c:62:f5:e3:d5:9c:56:6a:df:a9:64:0d:ac:
13:ad:37:96:70:42:dc:89:7a:da:53:83:55:fa:c7:
a7:b8:4a:f9:3d:1d:b5:63:b4:73:38:4a:a1:fc:cd:
44:88:17:d7:de:7d:83:1c:a0:53:45:f9:2b:4b:bd:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215512
Signature Algorithm: sha256WithRSAEncryption
0a:e8:e8:3d:e4:6c:6c:86:29:b6:46:35:27:e5:ee:54:3b:c3:
8d:82:85:68:2c:69:5e:12:db:2d:d5:78:67:43:af:40:3f:06:
e3:06:b7:4a:e1:3a:77:6e:c1:f6:0c:16:e2:b4:7c:b1:7b:0a:
f3:66:c0:e4:df:c0:6e:85:36:aa:3f:d9:5b:5d:80:bd:09:92:
fb:17:1e:42:fd:3a:36:aa:c1:f1:1a:f5:06:e6:17:d9:11:b4:
84:53:c8:6f:ff:25:f8:6c:39:dd:53:fc:d9:ab:14:bf:7c:8f:
1d:7d:5e:b7:46:ff:5e:70:bf:40:02:b6:8e:bc:78:23:27:0f:
17:88:0e:3a:6c:82:85:ce:2e:de:d2:41:44:c1:6a:d0:2d:2a:
20:af:95:00:69:86:e4:be:1a:d1:29:f0:10:7c:e2:69:4c:ca:
91:ac:bf:38:86:3b:3f:0f:50:da:e6:bc:41:f9:8a:da:34:80:
ed:53:f7:b1:9b:b0:dd:15:d0:97:f8:32:a3:30:99:da:40:79:
d9:c4:f2:31:7a:e9:b0:54:38:9f:db:10:c1:95:86:aa:67:c9:
5d:e1:09:3e:e8:c8:f9:e0:85:b4:9d:a9:8a:03:13:8d:99:c5:
93:9d:87:64:01:00:d3:ff:7c:4a:76:e1:99:d2:2b:f3:1b:19:
0e:9d:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:43 2024 by rpki-client on console-ams.rpki-client.org