Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
File: bvqMD-YuxUrMveNcYL2K1LkBT_c.cer (raw, json)
Hash identifier: Z8PrDJgv+Yu6zDEJPRCDR04lCMgTziHV/K1CDuie9/w=
Subject key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F2FFF7C12304EB7DA7C4855B6D6AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.91.8.0/22
IP: 2a05:e580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2f:ff:7c:12:30:4e:b7:da:7c:48:55:b6:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:82:0d:94:14:84:b5:45:55:50:04:78:3a:
47:69:1e:c4:1d:7a:2e:54:28:11:98:2c:c0:e2:03:
1e:64:cd:8d:f5:d3:11:1a:1e:18:07:4b:b0:e3:10:
12:df:b6:e8:ca:c0:51:c9:14:d7:96:df:8d:7d:4c:
fa:87:6d:9c:89:3e:d3:46:20:d2:c2:9e:5e:1c:63:
f4:b2:2a:4c:61:f9:c9:ba:f4:39:e3:33:07:ab:81:
ea:86:47:71:1b:74:01:e2:4d:7e:39:61:b1:67:d6:
74:5b:9b:88:b4:99:f7:36:9a:73:e9:6a:55:e2:f3:
4e:fe:7f:05:f1:fc:85:1f:fe:97:e6:40:46:2e:92:
06:a8:28:17:25:24:90:c9:45:ff:b9:bb:21:4c:6f:
d6:d4:bc:eb:69:47:fc:61:1e:38:d2:82:76:2e:81:
48:85:b4:26:bc:87:fb:b8:75:6a:51:eb:a5:55:b2:
15:7f:3c:33:33:56:4b:26:77:8e:e7:48:b9:81:df:
71:79:d8:27:e4:03:2a:89:36:b0:c3:8f:ea:85:d8:
d9:47:ff:14:f1:c2:92:d2:23:79:2b:34:de:b2:ad:
df:53:90:cf:b0:d3:1f:f4:1c:89:50:46:34:07:e9:
82:3a:69:b8:cf:41:49:27:91:4c:67:eb:25:62:41:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.8.0/22
IPv6:
2a05:e580::/29
Signature Algorithm: sha256WithRSAEncryption
6b:d8:90:86:6f:74:13:57:2d:c5:cf:9f:2a:f2:52:54:7c:c5:
96:aa:e3:92:7b:6a:69:e5:ab:d3:d0:58:78:79:f7:3c:8e:31:
42:db:b0:b5:77:64:4b:f1:17:47:fc:b4:9d:70:ce:50:4e:cd:
0d:ae:6e:33:61:d3:91:de:83:b1:92:a3:aa:e5:16:6a:d4:81:
6e:8f:ec:a7:36:06:63:6b:b7:d2:d1:c9:5c:af:a0:a8:a8:78:
62:2d:4b:68:f8:6c:e7:d8:4e:d1:2f:96:7f:e0:f7:b4:ca:2a:
d9:ef:a4:4a:74:15:11:3f:22:3e:ec:4b:bb:38:0c:d3:6d:76:
7c:ea:70:82:8e:f4:97:15:b9:55:6d:ea:74:7e:9f:7e:3f:a3:
30:fc:ff:03:e8:95:84:d1:36:ce:d5:8d:5e:c7:e2:55:be:a4:
2e:65:0a:74:26:4a:70:5d:d0:08:f0:61:e6:f4:3b:ec:78:d9:
31:94:cd:b5:4d:2e:25:68:b6:c2:6c:e2:a2:11:e1:10:fe:33:
c4:2a:36:91:f5:9c:90:c9:fa:ac:e4:3f:37:83:6f:b0:bd:b7:
32:07:c1:d8:db:30:79:67:fd:6f:6b:21:fb:dc:85:e6:6c:a4:
8c:ac:0a:1c:86:f0:24:41:74:b3:0f:29:7d:ea:35:f5:84:f3:
59:50:50:5e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIby//fBIwTrfafEhVttasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZhOGMwZmU2MmVjNTRhY2NiZGUzNWM2MGJkOGFkNGI5MDE0ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZOCDZQUhLVFVVAEeDpHaR7EHXou
VCgRmCzA4gMeZM2N9dMRGh4YB0uw4xAS37boysBRyRTXlt+NfUz6h22ciT7TRiDS
wp5eHGP0sipMYfnJuvQ54zMHq4HqhkdxG3QB4k1+OWGxZ9Z0W5uItJn3Nppz6WpV
4vNO/n8F8fyFH/6X5kBGLpIGqCgXJSSQyUX/ubshTG/W1LzraUf8YR440oJ2LoFI
hbQmvIf7uHVqUeulVbIVfzwzM1ZLJneO50i5gd9xedgn5AMqiTaww4/qhdjZR/8U
8cKS0iN5KzTesq3fU5DPsNMf9ByJUEY0B+mCOmm4z0FJJ5FMZ+slYkF6MQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFG76jA/mLsVKzL3jXGC9itS5AU/3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzZjN2Iy
Mi1iNjVmLTRmMzctYTQwZS1hOTkxN2NjMTVlMGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNmM3YjIy
LWI2NWYtNGYzNy1hNDBlLWE5OTE3Y2MxNWUwYS8xL2J2cU1ELVl1eFVyTXZlTmNZ
TDJLMUxrQlRfYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVsIMA0EAgACMAcDBQMqBeWAMA0GCSqGSIb3
DQEBCwUAA4IBAQBr2JCGb3QTVy3Fz58q8lJUfMWWquOSe2pp5avT0Fh4efc8jjFC
27C1d2RL8RdH/LSdcM5QTs0Nrm4zYdOR3oOxkqOq5RZq1IFuj+ynNgZja7fS0clc
r6CoqHhiLUto+Gzn2E7RL5Z/4Pe0yirZ76RKdBURPyI+7Eu7OAzTbXZ86nCCjvSX
FblVbep0fp9+P6Mw/P8D6JWE0TbO1Y1ex+JVvqQuZQp0JkpwXdAI8GHm9DvseNkx
lM21TS4laLbCbOKiEeEQ/jPEKjaR9ZyQyfqs5D83g2+wvbcyB8HY2zB5Z/1vayH7
3IXmbKSMrAochvAkQXSzDyl96jX1hPNZUFBe
-----END CERTIFICATE-----
Generated at Fri May 3 01:56:31 2024 by rpki-client on console-ams.rpki-client.org