Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
File: bzU9GF_B600HBKS0qJD5i4tP74M.cer (raw, json)
Hash identifier: OOgFTElG0LvtrnBrOOYaJG4Ois8fptmFamHaQTvGfWc=
Subject key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A53EF4316B341567D65EED80CA74E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.1.205.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:53:ef:43:16:b3:41:56:7d:65:ee:d8:0c:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:c4:0f:d4:27:2a:a7:2b:72:eb:7f:4e:39:
67:51:c1:f2:60:b5:65:09:b9:59:93:62:33:d3:27:
a6:5a:e6:b6:dd:e2:44:df:1d:da:93:6c:0e:58:a5:
d0:73:3b:04:48:9e:93:cc:6e:2f:4e:b9:7f:ab:9a:
a2:0d:f8:38:86:69:23:ad:70:34:f5:df:ce:93:35:
1e:d0:8d:b8:c6:29:04:08:ab:df:2b:ce:57:bf:50:
7e:00:71:de:ee:3a:a0:75:52:20:1d:72:13:2f:56:
e8:26:ec:45:44:23:61:f2:2e:8b:d6:03:f2:a1:4c:
a7:a8:83:f2:19:4d:76:85:b1:fe:e4:6d:58:82:1a:
ba:69:c5:65:21:de:c9:db:30:19:42:fd:24:f2:e6:
8d:1d:ec:ac:41:5e:be:e3:7f:fc:1a:85:3b:da:1e:
13:e9:9f:81:14:5e:7c:e4:2e:9e:19:46:df:14:d2:
54:f2:49:89:04:93:5c:e5:23:db:da:f4:1e:91:55:
95:8e:c9:ae:09:95:c2:5a:a5:7c:84:76:2f:ae:97:
34:f0:cf:5d:7e:ab:7b:bc:07:99:74:85:d0:51:42:
13:fe:7f:61:11:2d:e9:be:b3:d3:ef:bc:52:45:2d:
d0:53:3b:33:76:65:53:ec:9a:02:2c:57:04:b5:7c:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:19:20:52:f6:30:2b:5c:ab:6e:83:ce:ac:b1:c5:37:ce:7c:
07:55:e4:8f:60:6e:d8:4b:ef:95:11:52:b7:54:fa:fa:00:3c:
7b:18:f2:0c:17:9c:7d:bc:f9:23:e8:90:9f:d6:22:6d:1d:01:
51:0a:23:69:4d:5a:3c:cc:ea:d8:ca:27:b4:ee:1b:46:cc:cd:
02:7e:a3:62:74:62:7b:31:65:e4:8f:d2:d9:e2:0e:15:4b:4d:
21:96:aa:89:06:20:20:a6:d9:ef:0e:88:4e:2f:d3:05:e3:c6:
14:23:91:32:a5:36:46:d4:10:17:c9:6c:d6:d1:3d:f3:22:11:
48:96:d6:c7:da:ab:d3:37:4f:8a:16:e1:5d:98:cb:ca:64:f1:
c4:41:81:f6:7b:3f:f5:93:e6:61:f3:3d:71:74:ad:60:1e:f2:
a7:0b:4e:ad:78:93:48:5e:69:7e:9d:0a:2d:66:7b:a7:d3:ff:
e1:38:bb:e6:e1:98:2c:d4:de:32:41:fc:1c:19:92:c3:36:b4:
fe:d9:12:4f:c5:84:dc:f4:25:fc:e9:3a:92:c0:d7:41:c0:f9:
33:2d:e7:fe:d8:ea:68:ad:9b:5d:b5:37:8b:e0:8f:b0:af:d3:
e9:67:56:69:00:c8:30:3c:f8:e3:0e:2a:d9:5e:50:7a:4f:11:
ee:86:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:34:45 2024 by rpki-client on console-fra.rpki-client.org