Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
File: Bjutx4U7BRAKayJN3O_Bji59PdU.cer (raw, json)
Hash identifier: mbudwPvyqEFjBGBesKXgODnEdMEPAVPQsmC/FZ99+G4=
Subject key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493892EB02CBBC6A1DD6C7DA2815707
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8387
AS: 211351
IP: 46.17.224.0/21
IP: 92.61.208.0/20
IP: 185.49.176.0/22
IP: 193.162.45.0/24
IP: 212.31.64.0/19
IP: 212.166.96.0/19
IP: 2001:9d0::/32
IP: 2a10:f8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:89:2e:b0:2c:bb:c6:a1:dd:6c:7d:a2:81:57:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:a1:05:c7:25:5c:1b:b3:53:92:35:a0:d1:
50:55:8a:87:8a:2f:38:ec:75:11:12:f2:50:56:37:
22:91:e1:9b:68:35:e1:f3:af:82:91:3a:1b:df:11:
9b:98:e8:34:74:f6:06:fd:52:a5:f4:95:d5:08:f0:
81:12:3a:5d:1e:71:c0:aa:ac:a0:39:12:0e:51:35:
cf:22:f6:54:09:b6:4b:d4:70:cc:4f:f4:a0:b2:82:
90:dd:04:c8:21:8d:8e:b4:74:59:b9:20:6a:44:d9:
cb:b9:95:cd:fa:22:28:d2:1b:0e:ad:cd:f7:a1:f8:
18:02:cc:17:24:47:2e:24:b0:b4:31:d9:6e:1a:04:
8d:c2:a8:13:9c:fe:21:27:7f:4f:fa:62:04:8b:03:
15:a7:14:01:80:b7:87:cb:d4:2a:f8:f5:de:13:c8:
e9:6e:b5:fd:d2:77:5f:d5:f8:f7:3f:fc:75:a7:d8:
b5:df:66:11:4a:e8:b2:6b:c2:e5:b9:64:6d:7c:37:
02:ba:a8:a8:0b:51:d3:05:0c:3b:f4:9e:c9:0b:2a:
7e:99:e5:e6:b1:48:f4:b9:97:bd:d7:0a:90:b4:f8:
cd:76:fc:fe:9e:0f:39:31:dd:7d:94:6d:9b:af:8f:
a6:10:f8:ad:74:5a:1d:c6:fd:a2:a4:f8:be:1f:48:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.224.0/21
92.61.208.0/20
185.49.176.0/22
193.162.45.0/24
212.31.64.0/19
212.166.96.0/19
IPv6:
2001:9d0::/32
2a10:f8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8387
211351
Signature Algorithm: sha256WithRSAEncryption
57:4d:46:f8:ba:c6:f5:84:24:81:77:c2:6b:44:08:3c:98:93:
6e:79:0b:42:19:3b:db:ed:48:d9:88:19:ee:66:62:5b:4c:d5:
f8:07:73:38:ab:55:4d:4f:53:cf:38:e6:fe:37:c1:5d:25:07:
6b:7a:6f:94:3c:f2:ed:b4:07:de:5f:74:1c:10:25:80:11:51:
9f:92:56:c9:c6:32:57:3d:6e:1d:1c:99:fa:d7:be:5e:1d:a1:
81:a7:c8:d3:b0:10:ad:e8:7b:97:2c:33:3b:a7:23:70:0a:74:
d7:7b:de:1b:79:89:1e:bc:8a:bb:17:40:bd:06:d7:2c:8d:10:
8b:71:66:a5:51:ca:e4:ed:88:ac:14:72:c8:8d:6a:29:b1:93:
79:b8:ef:4f:bb:b9:a4:63:ae:7b:ff:22:fb:f3:94:7a:53:2a:
7c:fc:4e:43:d3:4e:a6:8e:0f:05:22:92:9e:58:21:88:5b:11:
b0:d5:9b:cd:cc:1b:b1:ae:a0:09:4e:2f:b6:a8:59:94:df:1c:
d8:f0:08:92:ff:62:94:23:2b:39:9d:b3:c0:be:62:32:4e:e2:
5c:d3:52:fb:af:04:07:d7:3f:67:60:f8:d8:dd:19:e0:54:e4:
14:79:09:64:52:56:0d:10:05:73:1e:72:b0:bf:26:c6:48:72:
53:e6:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:37:40 2024 by rpki-client on console-fra.rpki-client.org