Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.cer (raw, json)
Hash identifier: ChuLh3Ie5fNdT7c2LFu1LKeBms8GOpB6gHnB7FXBJ1I=
Subject key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01907031EF5656D986FFAE006A1971FA437F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jul 2024 21:27:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.31.8.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:31:ef:56:56:d9:86:ff:ae:00:6a:19:71:fa:43:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 21:27:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:62:c8:1e:72:2e:93:ce:c2:de:42:43:21:
ba:22:de:b3:47:8d:b6:70:a1:28:32:30:4e:da:e5:
c0:c0:9d:c8:66:44:79:75:ea:20:5e:aa:3a:94:de:
62:69:a3:03:ea:dd:32:f7:d2:f4:fe:e7:a2:a5:7e:
6e:e4:b9:03:14:a5:36:5b:60:2e:f2:c6:17:9d:b5:
81:1f:9e:f0:f4:56:d5:df:9d:8f:31:df:cf:07:bc:
90:c7:88:79:c7:b2:cb:7c:3a:8b:0b:76:38:ee:ef:
70:ca:c9:4e:72:a5:ad:5f:ef:62:af:7d:4a:4e:1f:
d8:4c:35:86:15:bc:a8:61:2c:22:f6:d0:97:2d:ae:
8e:c0:d8:88:43:76:e8:24:e2:49:ab:ac:1f:8e:b6:
34:5f:22:90:f1:5b:b0:5c:54:59:ac:2d:cd:bd:ee:
0e:1e:c0:a7:b9:8e:fc:14:3e:28:69:f2:7e:88:3d:
03:42:4f:65:01:a4:15:4d:98:ab:ee:95:7b:24:4a:
18:6f:b6:dd:4a:41:6f:12:33:43:69:db:8a:a7:74:
ff:87:3c:e2:64:86:29:dd:de:6d:08:2f:fa:1a:37:
78:94:13:16:1f:be:18:c9:c6:f7:ac:da:98:75:8d:
b1:48:79:d5:f5:88:a6:1f:d5:ec:79:a9:c0:62:c7:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.8.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8c:28:f6:b9:44:9a:fd:25:1f:25:21:12:9f:ce:76:e0:e1:
2d:f4:f7:73:2b:b5:12:40:4e:e5:4f:cf:14:6c:e1:57:54:17:
ab:9d:30:bb:65:70:6d:82:ed:4a:a7:ef:74:89:8c:8d:bf:e9:
2d:02:e0:ac:39:ca:66:97:e6:65:50:ec:6d:89:1b:e0:55:55:
4f:7e:56:9b:f5:69:24:34:04:34:d3:c5:0d:48:d6:55:7c:c6:
68:01:1b:79:ad:a5:07:93:98:76:57:2c:b6:06:68:94:bf:51:
e9:00:d1:65:89:08:2e:13:75:7c:8c:82:e8:90:e0:e9:3f:74:
5b:49:2e:4b:1c:e7:88:65:d8:bf:64:e9:48:7a:3f:ed:13:96:
8c:cb:6c:b5:b0:5d:09:b7:6f:61:19:8b:43:c3:fa:e0:62:3b:
6b:29:2e:69:6e:87:3a:ab:cf:06:6b:ba:36:02:8e:3c:4a:dd:
28:52:5a:26:04:ab:3a:8e:44:ff:84:3b:c5:b3:6c:ff:f0:3c:
98:96:2b:e6:56:60:15:e7:c2:33:8e:b7:97:93:38:7d:9e:2f:
f5:14:21:47:26:8a:d8:10:ae:6f:6b:df:e3:f6:cb:26:d3:0d:
c0:df:bf:e2:3d:64:3b:6b:77:72:9d:d3:3f:00:d7:dc:e2:7e:
d3:3e:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:07 2024 by rpki-client on console-fra.rpki-client.org