Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.cer (raw, json)
Hash identifier: WhJIDkNO78XpN4cWoFe8/fzbw1g34Yxfd5cN0tUqFYg=
Subject key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7BD268454F7A3F0F7B8D228E82B9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201723
IP: 2001:678:3d4::/48
IP: 2001:67c:6bc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bd:26:84:54:f7:a3:f0:f7:b8:d2:28:e8:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:90:47:5a:32:7f:bc:47:59:8f:86:d7:01:
19:1e:65:44:16:e0:ea:f7:fe:eb:a1:40:c8:87:f6:
c3:ab:3e:f3:a7:37:6b:d3:df:7a:10:b5:cd:20:ac:
bc:28:6a:e0:92:89:8b:ca:b5:e5:a6:6a:fb:90:a6:
4b:7c:7c:ce:81:77:f6:a2:10:e9:cb:e7:0d:45:bb:
61:22:f7:fe:bb:78:18:03:e6:66:c3:c0:33:69:05:
33:60:92:33:7a:58:30:dc:50:d0:a0:5a:04:bd:97:
0c:43:53:9b:3d:78:e7:ec:ce:09:20:5d:9a:cb:d9:
b6:35:03:15:29:5f:fe:18:1b:c3:ec:3e:4c:92:b4:
ce:74:54:ac:06:6c:16:7a:88:1b:49:14:f1:a3:1c:
0d:a2:57:6a:83:21:45:3a:63:fc:cc:6d:c4:63:05:
31:e2:a9:32:5e:2c:59:43:f9:3a:e3:5d:c9:68:ec:
c1:5d:2c:fd:0a:a0:fc:40:1d:38:d6:0c:bf:1d:bf:
29:50:23:16:83:52:70:ae:16:2b:3b:cf:ae:96:10:
47:93:3d:ef:86:bb:e0:55:1a:7d:5c:e3:aa:2b:be:
3d:20:04:43:87:74:8c:7a:39:20:0d:e3:b1:0e:76:
39:d4:48:ee:85:25:11:a9:82:70:3c:ef:fb:02:10:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3d4::/48
2001:67c:6bc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201723
Signature Algorithm: sha256WithRSAEncryption
72:b6:00:eb:74:b4:70:9a:bd:ec:c8:3a:3a:45:f4:72:6c:e5:
a8:33:1f:0d:08:df:75:0b:80:d0:ed:9f:3d:db:c8:e1:29:12:
6f:43:96:a4:c3:a2:fd:94:a8:93:4d:25:b9:e5:e0:6d:25:47:
3c:4a:27:91:99:13:da:9d:54:54:c2:61:61:ad:cb:0c:06:15:
96:e9:f4:b2:1e:f7:65:8e:6d:4e:b1:6e:04:79:bb:a9:87:41:
69:8d:6c:91:d5:59:5e:ea:7d:41:42:6d:49:06:c7:cf:63:ab:
26:d3:32:8c:d0:ef:18:10:c2:93:86:ee:3e:d1:d1:2f:97:f8:
fe:64:bd:53:da:d1:f0:94:e8:e9:b5:9d:e6:49:6e:c7:98:73:
61:7a:06:61:1f:57:e4:b1:bc:aa:cf:04:85:3a:3c:51:c5:f0:
92:75:aa:45:56:2b:da:ea:de:69:58:2b:f3:98:5a:94:bf:3d:
70:4b:0d:a3:54:9b:21:1b:eb:60:9b:da:d7:ec:7a:2d:df:98:
14:0a:5b:e0:2f:41:49:28:7b:80:d4:49:bc:b0:6c:80:05:7c:
61:69:ad:94:f4:86:0f:34:99:54:84:cf:31:90:66:eb:6e:df:
5e:bf:04:a5:3b:d3:d0:e4:ab:2a:c2:5c:09:df:01:4b:50:55:
1e:96:e2:01
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYzGt70mhFT3o/D3uNIo6CufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjMzYWZkNDFlYTAxMmZiMjgwM2M3Mjc0NTIzYzhlYzNmMjYxMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+QR1oyf7xHWY+G1wEZHmVEFuDq
9/7roUDIh/bDqz7zpzdr0996ELXNIKy8KGrgkomLyrXlpmr7kKZLfHzOgXf2ohDp
y+cNRbthIvf+u3gYA+Zmw8AzaQUzYJIzelgw3FDQoFoEvZcMQ1ObPXjn7M4JIF2a
y9m2NQMVKV/+GBvD7D5MkrTOdFSsBmwWeogbSRTxoxwNoldqgyFFOmP8zG3EYwUx
4qkyXixZQ/k6413JaOzBXSz9CqD8QB041gy/Hb8pUCMWg1JwrhYrO8+ulhBHkz3v
hrvgVRp9XOOqK749IARDh3SMejkgDeOxDnY51EjuhSURqYJwPO/7AhDJrQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzllYWY3
Zi1hYjAwLTQyYjItOWNlMi1iMzU4MDk5NGEzYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvOWVhZjdm
LWFiMDAtNDJiMi05Y2UyLWIzNTgwOTk0YTNiMS8xL2J6T3YxQjZnRXZzb0E4Y25S
U1BJN0Q4bUV4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAPUAwcAIAEGfAa8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwMT+zANBgkqhkiG9w0BAQsFAAOCAQEAcrYA63S0cJq97Mg6
OkX0cmzlqDMfDQjfdQuA0O2fPdvI4SkSb0OWpMOi/ZSok00lueXgbSVHPEonkZkT
2p1UVMJhYa3LDAYVlun0sh73ZY5tTrFuBHm7qYdBaY1skdVZXup9QUJtSQbHz2Or
JtMyjNDvGBDCk4buPtHRL5f4/mS9U9rR8JTo6bWd5klux5hzYXoGYR9X5LG8qs8E
hTo8UcXwknWqRVYr2ureaVgr85halL89cEsNo1SbIRvrYJva1+x6Ld+YFApb4C9B
SSh7gNRJvLBsgAV8YWmtlPSGDzSZVITPMZBm627fXr8EpTvT0OSrKsJcCd8BS1BV
HpbiAQ==
-----END CERTIFICATE-----
Generated at Fri May 3 11:44:29 2024 by rpki-client on console-ams.rpki-client.org