Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
File: BU1P54D-RTMHgN627DhMuUk_LfI.cer (raw, json)
Hash identifier: gX2LpbIXJfsA4/uRh+UNL5iGKnRcy3PnCnrl5dcm7pA=
Subject key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC90492C69B7461420C15AB8149DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203787
AS: 216172
IP: 185.30.108.0/22
IP: 2a00:9e60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c9:04:92:c6:9b:74:61:42:0c:15:ab:81:49:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:60:53:f3:58:4c:ba:13:49:f6:d2:d4:7a:
e9:1a:68:24:2f:52:4e:03:9a:c7:ec:42:cc:1d:31:
ea:23:17:ba:08:fe:ff:91:66:2e:0a:bf:80:49:aa:
0d:93:3c:0d:2d:a4:79:fa:73:0d:c0:6c:45:36:f5:
1b:ad:2b:8c:8f:68:6b:69:2f:91:cb:61:5f:02:30:
a4:93:95:8a:bd:36:bb:64:66:82:54:9c:67:09:51:
d0:f1:24:f9:4f:b7:2f:dd:fd:ef:e7:ae:3c:a3:a7:
58:7c:70:39:9b:d1:a3:4a:df:a8:91:4c:b8:f9:9c:
51:be:86:db:ff:b9:9a:68:e7:93:6a:37:25:c8:d6:
13:9d:4e:f4:ba:35:a4:bf:77:a1:5e:4e:be:fe:94:
2d:40:37:02:06:5a:37:48:16:d8:ca:5a:49:a4:af:
62:66:30:c7:8f:c8:34:69:6a:ec:ea:10:55:59:f9:
45:a0:18:2e:f6:87:a5:67:c4:02:cb:4d:ea:ac:8d:
c1:50:d8:08:fd:97:1b:25:aa:83:49:06:bf:69:cf:
ff:75:15:31:1f:46:4f:c3:34:93:de:5b:b8:26:cf:
57:4f:83:d4:a4:2c:e0:d7:3b:4d:23:39:7d:10:da:
f5:86:1a:40:ec:51:85:c0:fd:50:81:e4:89:10:31:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/22
IPv6:
2a00:9e60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203787
216172
Signature Algorithm: sha256WithRSAEncryption
5b:33:30:21:05:70:0f:4a:ac:c5:35:b2:7c:d8:6d:11:d3:e3:
62:4d:19:8c:bf:4a:b1:b3:2f:32:1c:d2:01:6d:46:64:22:27:
0d:e8:15:1f:9f:03:f7:52:ad:cb:e5:0b:3f:b6:43:73:d4:fe:
d1:2e:dc:34:72:c9:6a:8f:96:ce:cb:40:cc:04:fc:56:4d:99:
8f:d1:b9:22:e9:f0:fa:8e:19:65:d6:92:a5:1d:4b:5d:d7:18:
6a:44:05:61:72:2d:9a:8f:9f:a1:94:3f:b4:34:1d:7b:37:c1:
5e:7a:53:32:17:7e:19:ea:95:01:7b:91:67:a0:25:e7:f9:2c:
ee:fd:09:b4:40:fc:fc:ec:32:0b:76:23:27:40:ed:50:03:31:
c4:e0:1d:80:06:eb:26:87:49:dd:de:8e:53:c5:aa:d7:f6:24:
a8:a0:72:3c:a6:2f:2f:ea:88:d1:db:e9:53:ea:da:87:c2:7f:
45:3b:29:cc:29:f7:1c:77:80:3f:59:03:6f:1d:c1:78:96:ad:
52:17:e4:16:d3:90:a1:34:b9:22:73:45:b2:ea:60:61:da:72:
39:4f:5e:fb:6e:be:11:47:db:fa:7f:0c:10:1c:4a:e9:ed:7d:
fd:cf:70:fb:db:1d:fb:bf:a9:f7:a5:21:45:8d:d1:20:0d:b1:
15:57:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:10:13 2024 by rpki-client on console-fra.rpki-client.org