Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer (raw, json)
Hash identifier: xa60Zb+G4s46Sgm9UilSeMp0hzhrlzj1uUXlLgqfdiY=
Subject key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A41BEE09ABF8566790553102D168
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212038
IP: 185.218.197.0/24
IP: 2a10:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a4:1b:ee:09:ab:f8:56:67:90:55:31:02:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:69:0b:a6:60:69:fa:99:6d:6b:c5:e8:e0:
bf:b7:31:a0:a7:8e:7e:21:41:cc:45:ca:ed:df:f6:
78:b8:31:cb:df:05:14:31:44:2a:10:33:f2:94:8e:
87:a9:81:9f:74:4f:43:fd:64:4d:74:74:19:86:4c:
30:a4:bb:6b:a5:ee:03:f0:87:23:ab:dd:05:4c:85:
45:0f:c8:83:68:1a:51:e6:44:6e:7b:bf:91:60:36:
44:5e:1c:53:e7:5f:93:5b:3d:64:21:a1:bd:6e:c5:
af:5c:1e:8f:43:28:7c:15:60:38:84:60:bf:65:5a:
44:e1:1a:32:1c:69:7b:21:64:ef:2f:62:5e:aa:9b:
6d:f1:58:12:9e:04:b9:3e:f8:e0:0c:91:18:62:0a:
3c:cc:0e:fc:ff:6e:eb:66:d4:d0:2c:1c:a7:40:37:
4c:ec:b8:c8:43:83:fd:87:fe:46:c6:f2:bc:c9:a4:
81:0e:06:7b:b7:0f:20:1b:42:54:0d:6a:27:01:55:
aa:84:76:8f:2e:2d:47:20:bc:94:c1:af:97:8c:3a:
a9:e1:f3:c5:54:13:8a:bc:a0:b7:18:6a:27:dd:8b:
b9:19:67:aa:26:1c:9d:4c:5b:7f:84:e0:ec:a5:37:
9c:9e:97:78:66:66:65:c1:d8:61:be:69:88:53:3e:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.197.0/24
IPv6:
2a10:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212038
Signature Algorithm: sha256WithRSAEncryption
ae:79:11:bc:ad:bb:d8:3a:cf:07:46:34:21:1d:3a:33:61:1b:
24:9e:1e:31:bd:24:c8:7c:fb:c3:bf:cb:ad:07:c7:27:39:85:
fb:78:ad:b8:c6:7d:f7:40:96:3a:2a:60:4c:94:72:7a:9c:49:
ae:fd:a1:74:3a:10:6b:55:11:a1:b0:cd:3b:4a:65:ee:0a:49:
39:9a:de:f8:bd:f1:9d:58:41:df:ab:25:c4:8d:88:82:77:e0:
84:da:78:a2:35:e6:a4:68:e0:cb:95:d7:25:3f:75:fb:62:71:
3d:fb:90:af:67:a8:71:0a:06:2c:e4:cf:a3:fb:d6:11:b4:cf:
80:37:25:a4:e4:e9:47:53:59:41:07:de:e6:aa:36:08:1d:81:
82:89:b7:03:cc:c7:11:88:56:d8:c6:49:4b:52:22:52:a6:f3:
4f:5f:d3:30:9a:44:c5:f0:4d:0d:f4:bd:21:ef:e4:6f:31:70:
ba:62:7e:64:14:5d:f1:86:9f:48:9e:5a:62:96:62:a5:f4:d9:
7c:80:51:db:be:38:e3:fd:80:e4:90:44:a2:06:84:6b:fc:85:
e6:f2:39:e1:f3:ba:ea:c2:37:95:43:cd:a9:91:68:a6:4a:39:
9e:bc:88:6d:2d:73:cf:a9:5c:4c:6d:c8:4c:27:87:22:76:10:
76:09:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:52:06 2024 by rpki-client on console-fra.rpki-client.org