Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer (raw, json)
Hash identifier: KXmYjRQ6wkbdzBoJy1/4ZIySVgsFaNYEIsl59D/qokY=
Subject key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1CA0A1C75BF65A6F02DA061976D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 153.92.42.0/24
IP: 155.133.195.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1c:a0:a1:c7:5b:f6:5a:6f:02:da:06:19:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:b5:99:1e:a5:26:92:0f:2f:7b:68:66:3d:
b4:c9:59:d6:39:26:90:30:4c:80:ae:08:1c:5e:b6:
08:40:ed:b7:f9:67:2e:51:a1:70:e4:08:13:2d:4c:
0e:ae:27:3e:5f:f0:8b:76:98:96:5d:fb:a9:43:c5:
b2:65:81:d2:1e:e9:7a:0f:31:32:f9:d4:a2:aa:d6:
fe:58:93:34:46:f2:a4:6d:97:7f:35:37:71:00:14:
54:0e:d3:b0:f7:2b:97:db:ec:8e:fe:46:3d:0a:65:
b0:db:c1:74:c8:a7:31:51:81:24:1c:ec:d3:a8:94:
30:2b:66:eb:ee:38:46:e0:5f:cf:f1:89:13:ed:61:
cc:5b:c0:f9:f3:a4:2e:da:6a:72:5a:68:5e:f7:ee:
a8:48:72:ac:b0:c9:bd:97:47:92:c2:41:eb:24:7c:
6d:3f:02:d2:48:52:93:dd:91:3c:3c:38:b7:05:1f:
dc:26:80:8d:b2:64:8f:7f:5c:6b:04:88:6c:64:03:
60:3e:0a:50:48:8a:25:36:b9:3a:e8:9d:55:aa:81:
33:20:bd:19:5e:e0:af:59:36:e1:bf:e3:40:85:75:
fc:41:43:1f:98:6a:9c:16:89:f3:80:fd:dd:e9:5f:
3b:c4:3d:b6:f7:b9:95:55:bf:93:ca:18:e5:8f:0d:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.42.0/24
155.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:ec:58:91:bc:23:de:16:c6:88:b1:11:93:7b:6a:f6:2a:
85:40:7a:46:c8:a7:55:46:12:b6:78:d2:69:24:11:4d:7b:96:
34:44:41:b7:19:d0:79:56:b5:c4:bd:c5:5b:bc:7f:9c:31:d3:
1e:66:bb:11:60:b3:9d:07:87:a6:b9:a0:a1:4a:8f:dd:e6:43:
b7:88:b5:3e:e5:09:63:24:5b:64:d8:4e:7f:4d:56:c0:dc:15:
87:50:90:5b:91:56:72:6b:3a:6e:5c:44:e9:c6:38:3f:88:60:
9e:e1:f9:4b:14:ad:03:b0:68:5d:9b:ac:b4:73:7e:fc:fb:09:
f9:79:ac:11:9a:f4:ba:d5:ba:78:7d:36:60:df:4c:d1:78:fd:
d0:b7:6e:1a:6b:73:67:a2:5d:53:a9:f4:79:ee:ab:ba:fa:4b:
a6:75:52:6c:d8:04:55:2f:d8:9e:5d:0f:c7:ab:dc:e3:a8:6c:
8a:bd:ca:8e:69:28:4c:e0:ca:23:d8:f5:a6:e9:a2:6b:a1:52:
21:78:61:9b:b0:1d:f9:c6:be:b8:05:7a:f4:8a:24:37:b9:e4:
f7:64:9f:0d:28:05:2f:93:75:05:20:00:83:bb:ea:98:54:f0:
26:52:22:f4:b4:10:cd:74:62:6e:4e:e1:61:44:7c:90:ee:e1:
3c:fb:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:04:43 2024 by rpki-client on console-ams.rpki-client.org