Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer (raw, json)
Hash identifier: cCoGcwIUINPH+LF5cqiPRuMlDKMVMhCLZ4OFVtnTwM0=
Subject key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C04FF5CCF4B6E9CA684337F00DFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212038
IP: 185.218.197.0/24
IP: 2a10:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c0:4f:f5:cc:f4:b6:e9:ca:68:43:37:f0:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:69:0b:a6:60:69:fa:99:6d:6b:c5:e8:e0:
bf:b7:31:a0:a7:8e:7e:21:41:cc:45:ca:ed:df:f6:
78:b8:31:cb:df:05:14:31:44:2a:10:33:f2:94:8e:
87:a9:81:9f:74:4f:43:fd:64:4d:74:74:19:86:4c:
30:a4:bb:6b:a5:ee:03:f0:87:23:ab:dd:05:4c:85:
45:0f:c8:83:68:1a:51:e6:44:6e:7b:bf:91:60:36:
44:5e:1c:53:e7:5f:93:5b:3d:64:21:a1:bd:6e:c5:
af:5c:1e:8f:43:28:7c:15:60:38:84:60:bf:65:5a:
44:e1:1a:32:1c:69:7b:21:64:ef:2f:62:5e:aa:9b:
6d:f1:58:12:9e:04:b9:3e:f8:e0:0c:91:18:62:0a:
3c:cc:0e:fc:ff:6e:eb:66:d4:d0:2c:1c:a7:40:37:
4c:ec:b8:c8:43:83:fd:87:fe:46:c6:f2:bc:c9:a4:
81:0e:06:7b:b7:0f:20:1b:42:54:0d:6a:27:01:55:
aa:84:76:8f:2e:2d:47:20:bc:94:c1:af:97:8c:3a:
a9:e1:f3:c5:54:13:8a:bc:a0:b7:18:6a:27:dd:8b:
b9:19:67:aa:26:1c:9d:4c:5b:7f:84:e0:ec:a5:37:
9c:9e:97:78:66:66:65:c1:d8:61:be:69:88:53:3e:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.197.0/24
IPv6:
2a10:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212038
Signature Algorithm: sha256WithRSAEncryption
03:66:14:96:73:d9:cd:b0:5d:ec:62:9b:84:e7:2c:df:cb:ad:
46:eb:0f:2b:08:5b:f0:52:dd:67:bb:a2:43:3f:d9:c3:f6:83:
b5:76:2f:a8:f2:ba:fd:c9:07:17:f4:f3:7d:46:92:7d:c2:c5:
29:30:67:9e:fd:83:ac:df:fb:f9:7d:cb:f6:8f:ba:99:a7:b4:
be:59:d8:58:17:4a:1c:ef:cc:16:ff:bd:d4:ff:37:65:f3:97:
65:a4:5b:6b:1e:a9:24:bd:fa:8d:28:da:ac:1b:b7:bb:c1:c7:
60:4e:86:1b:0b:33:87:12:c9:6f:69:c1:46:3d:bc:bd:20:52:
37:83:e6:f0:48:b9:84:f7:31:cc:9a:c7:60:71:c1:1f:9f:6e:
9c:97:dc:12:b6:a7:02:d4:96:c0:37:3d:4f:1b:93:76:94:13:
a9:3f:09:7b:b2:82:cb:07:9e:74:c7:8e:d1:9d:d7:34:ef:50:
cc:59:ba:27:14:d6:38:fc:4b:df:a8:4d:2d:59:f2:96:8f:fc:
a0:2e:14:e2:8e:37:c1:32:b1:8d:78:d0:2a:64:87:9e:e6:ea:
a4:52:f1:5d:f1:51:7a:a6:0b:cf:f5:7e:22:e2:75:ef:6a:c4:
a9:a0:dd:b5:de:e0:da:1a:69:99:6b:09:9c:24:c5:43:10:b2:
ff:3b:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:54 2025 by rpki-client