Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
File: x_BLeLLu35mO3VzB6IZxyNEPGGU.cer (raw, json)
Hash identifier: naSh2AAVWDWpNPwS7uANlzmD2IpKIseTHR1x9YrPJ2Y=
Subject key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE951A5330D7554956A180B4AA846
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206618
IP: 143.163.0.0/16
IP: 193.23.96.0/20
IP: 194.114.0.0/17
IP: 2a01:4dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e9:51:a5:33:0d:75:54:95:6a:18:0b:4a:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:8a:c6:02:ce:2c:30:49:2b:22:bd:55:a7:
83:62:7a:da:95:d8:b0:fe:35:89:94:df:63:41:2a:
e9:17:0b:f9:4b:4b:b7:ff:56:c0:2d:dd:05:92:f0:
77:f2:80:c7:de:3a:41:27:2b:d1:ad:96:7b:06:31:
e0:eb:b6:49:45:f3:32:c8:2f:f3:9b:0b:5c:c6:32:
eb:ac:88:c3:82:8a:4c:a4:f1:49:f9:3a:8e:2b:7d:
46:20:5c:bd:63:fc:f6:22:e9:bf:8f:7f:70:78:11:
e8:97:d6:29:02:62:fc:8b:78:87:f5:2e:05:35:f1:
bf:f5:a9:cd:6c:13:c6:c5:76:26:63:9f:78:cf:b0:
38:09:c8:53:c5:48:31:98:bb:65:df:5d:69:6c:37:
5f:9c:36:b6:51:8c:57:5b:ce:26:a7:42:25:d2:55:
79:27:d2:4c:ed:81:00:97:da:bb:3c:74:ed:cc:33:
34:93:26:a1:16:db:a4:57:c7:63:26:69:e6:d2:c0:
f0:52:d8:3c:71:ec:54:55:ee:d4:07:d8:8c:9a:73:
2b:40:77:68:73:94:4a:55:9c:49:a6:19:af:5a:b2:
35:e5:6e:1c:d8:79:4f:ba:34:2e:01:e4:5c:57:3a:
06:67:da:9c:34:24:8e:ff:6f:21:b6:1d:de:46:1c:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.163.0.0/16
193.23.96.0/20
194.114.0.0/17
IPv6:
2a01:4dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206618
Signature Algorithm: sha256WithRSAEncryption
4f:fb:61:ae:9e:43:a0:ce:04:7e:9d:c7:a3:87:4a:d3:f2:2e:
a7:9e:a6:e4:5a:82:32:30:68:b2:b8:5e:0c:ab:68:5d:b1:c1:
ef:41:c5:b1:4a:43:ab:47:ca:12:ec:2b:ab:00:fb:56:b4:ae:
4e:f7:e0:f3:72:a1:47:f4:12:35:c9:fa:58:99:9a:ec:45:14:
e9:25:fb:61:65:1f:7d:cd:22:3b:b2:e7:02:8d:62:1a:ea:20:
c9:0c:d5:ed:67:a9:ef:cf:7f:de:99:83:05:20:58:25:10:d2:
62:65:10:9b:23:42:db:b3:f0:1a:60:fb:23:1a:20:9f:09:30:
ec:73:f0:3b:4e:12:dc:e4:88:58:b2:8b:f2:ba:99:37:f7:ed:
ea:3b:c1:6e:17:8e:00:d3:f9:f2:88:36:dd:2a:eb:3f:72:1d:
dc:0e:80:26:99:14:52:5f:e9:fd:41:8f:73:f2:88:9a:ad:c3:
40:82:69:1c:b2:5a:94:40:99:b6:f4:74:65:54:aa:f2:9f:40:
09:86:4d:1f:ae:c3:e8:73:71:d6:b6:2a:3e:58:a0:48:e6:99:
ac:97:f8:67:ad:e1:2c:a8:96:e0:67:1d:29:91:eb:7d:be:f5:
35:5b:b6:13:c4:4c:39:f5:ec:34:58:41:eb:a6:97:67:ae:c8:
ab:cc:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:57 2024 by rpki-client on console-fra.rpki-client.org