Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.cer (raw, json)
Hash identifier: hhxT3p9hwOCgnjzWl7O3V7m5BpxfVyhU4lx6YoVoHS0=
Subject key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251C2BBAB480B3546951EC8731680D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49371
AS: 204908
IP: 185.124.12.0/22
IP: 185.236.28.0/22
IP: 2a03:9000::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1c:2b:ba:b4:80:b3:54:69:51:ec:87:31:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:33:81:f9:1c:d1:d9:b2:f3:4c:68:25:49:
7e:37:7f:7c:29:14:4b:6c:51:85:21:1f:c5:38:77:
1d:0f:3d:78:0f:45:61:22:7e:a7:29:24:a5:8b:46:
53:da:54:75:da:3c:43:af:0b:64:25:b6:86:2f:50:
e0:cf:3d:01:b5:8c:8c:ba:72:c4:0c:27:5c:61:0a:
ce:ba:18:a0:e0:32:aa:cc:8b:c4:66:02:9f:6f:ff:
a0:73:06:03:23:60:57:b1:b6:2b:19:b1:1a:bc:e0:
91:c5:f3:94:b5:d3:39:43:32:e2:6d:ce:bb:5a:04:
a1:0c:df:21:cc:75:fa:d7:ab:cd:f5:85:bc:65:37:
62:ec:48:e9:83:a3:b9:55:00:67:b0:cd:56:21:7e:
7b:a8:b2:3b:41:5c:9b:be:e0:08:40:c3:ce:75:23:
a9:3b:57:37:9d:c2:3b:51:e0:a8:de:e3:ec:c2:1e:
69:fe:7e:85:9b:c9:19:a8:70:44:fa:97:b1:47:a0:
8a:43:06:64:6a:e3:8b:16:e7:e8:a1:46:ae:fb:42:
6d:3d:76:3a:5c:c4:09:4a:65:48:9b:23:d4:0b:0f:
72:71:ce:03:73:20:4b:c0:78:f4:56:04:8e:a6:7a:
e3:3a:00:8d:b6:40:ab:40:51:87:46:57:e6:52:b7:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49371
204908
Signature Algorithm: sha256WithRSAEncryption
5f:70:89:38:ec:00:8c:03:8a:86:a6:ec:10:5a:04:47:59:a5:
88:08:41:eb:0b:24:43:f6:06:42:43:d5:ac:ca:97:21:90:6a:
7f:ce:93:fd:30:88:aa:39:e1:f0:d6:8d:ff:36:06:51:a1:4d:
97:8f:87:de:07:d9:2f:66:b5:40:fe:4c:6f:80:de:24:c1:0f:
c7:4d:13:71:cf:58:15:35:a6:23:41:0c:d7:67:e2:83:5a:33:
ab:23:f2:4c:94:c0:18:1e:e4:98:f2:f4:11:06:c8:55:7f:a9:
5f:90:74:27:cd:a0:d3:55:f7:12:dd:7f:bd:a6:58:a0:85:cb:
e6:58:e8:94:41:65:96:95:3a:19:fa:63:61:52:ff:f8:63:d7:
1e:20:5f:c9:df:45:3e:4d:aa:a7:5a:af:c5:8b:63:00:b8:74:
97:db:1b:8c:dd:4b:78:84:88:f7:07:29:93:21:8e:f6:79:90:
65:b5:52:8d:f6:7d:14:ee:d1:06:11:4f:1e:86:6d:72:b2:d1:
f5:1f:be:20:af:25:ec:89:71:66:aa:3e:60:0f:89:5e:eb:c4:
2e:8c:ca:67:38:b0:66:d5:57:50:bc:a8:59:f0:7e:f7:55:83:
f3:99:65:59:1b:ab:3f:8d:42:14:07:21:12:ec:0a:e6:7d:2e:
20:22:67:71
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAYzEJRwrurSAs1RpUeyHMWgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjFiYTZlMTRkODNhOGIxNGIwNTAyNmU3MTBjODZjNDZiNzNjM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTczgfkc0dmy80xoJUl+N398KRRL
bFGFIR/FOHcdDz14D0VhIn6nKSSli0ZT2lR12jxDrwtkJbaGL1Dgzz0BtYyMunLE
DCdcYQrOuhig4DKqzIvEZgKfb/+gcwYDI2BXsbYrGbEavOCRxfOUtdM5QzLibc67
WgShDN8hzHX616vN9YW8ZTdi7Ejpg6O5VQBnsM1WIX57qLI7QVybvuAIQMPOdSOp
O1c3ncI7UeCo3uPswh5p/n6Fm8kZqHBE+pexR6CKQwZkauOLFufooUau+0JtPXY6
XMQJSmVImyPUCw9ycc4DcyBLwHj0VgSOpnrjOgCNtkCrQFGHRlfmUre9awIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFG8bpuFNg6ixSwUCbnEMhsRrc8OmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2NlODFi
Ni1iY2ViLTQ3YmMtYWRmYi1kYWU5ZmI4YmYwYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvY2U4MWI2
LWJjZWItNDdiYy1hZGZiLWRhZTlmYjhiZjBiMS8xL2J4dW00VTJEcUxGTEJRSnVj
UXlHeEd0enc2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuXwMAwQCuewcMA0EAgACMAcDBQAqA5AAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDA2wIDAyBsMA0GCSqGSIb3DQEBCwUAA4IB
AQBfcIk47ACMA4qGpuwQWgRHWaWICEHrCyRD9gZCQ9WsypchkGp/zpP9MIiqOeHw
1o3/NgZRoU2Xj4feB9kvZrVA/kxvgN4kwQ/HTRNxz1gVNaYjQQzXZ+KDWjOrI/JM
lMAYHuSY8vQRBshVf6lfkHQnzaDTVfcS3X+9plighcvmWOiUQWWWlToZ+mNhUv/4
Y9ceIF/J30U+TaqnWq/Fi2MAuHSX2xuM3Ut4hIj3BymTIY72eZBltVKN9n0U7tEG
EU8ehm1ystH1H74gryXsiXFmqj5gD4le68QujMpnOLBm1VdQvKhZ8H73VYPzmWVZ
G6s/jUIUByES7ArmfS4gImdx
-----END CERTIFICATE-----
Generated at Fri May 3 09:18:53 2024 by rpki-client on console-ams.rpki-client.org