Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
File: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer (raw, json)
Hash identifier: gxB+5PCQ5J1cofqDVW6efVFbE9COw4fR0P/sWOP9MlI=
Subject key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72655751615C0FEED6DACB183EC4A4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43435
AS: 62237
IP: 45.132.144.0/22
IP: 78.155.96.0/19
IP: 2a02:eac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:55:75:16:15:c0:fe:ed:6d:ac:b1:83:ec:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:2b:28:6b:b0:5c:6e:03:e0:9b:95:41:e0:
b5:95:05:d5:63:4a:6c:c8:32:66:58:d1:97:b8:bf:
5c:1a:09:2d:5e:5f:ce:f6:f1:9b:ef:b4:1b:d0:38:
41:9f:ea:c0:b3:42:2d:0f:4d:64:73:15:86:31:04:
64:89:23:fc:dd:a0:a4:0b:2b:68:b5:6e:b9:d4:41:
83:58:65:d1:92:88:ef:1d:3c:2f:66:ad:cc:82:47:
72:73:4e:81:b3:86:de:1c:6e:d3:ed:e1:b5:58:6e:
b2:ed:2e:a4:0b:12:3c:6b:0f:87:df:ff:66:85:81:
3d:f4:1e:5c:08:89:7b:b1:39:f8:1c:2a:2d:19:9a:
9d:35:af:98:f9:02:04:b0:81:1a:5e:2e:66:d9:d0:
22:04:47:9c:fb:04:ea:18:18:f6:fa:a4:be:5e:92:
0b:d6:08:de:c9:dc:b3:bb:c1:c3:c9:a0:4a:ce:bc:
ef:11:59:3d:2a:fe:bb:63:32:d7:19:43:2e:da:eb:
06:53:17:dd:9e:de:19:87:29:a9:ae:70:4c:07:56:
ef:2d:e5:80:6e:5e:f6:7d:49:c0:da:2b:ee:d2:96:
c2:c5:15:10:e0:01:9f:4a:e6:52:86:30:89:9b:51:
bf:d1:f8:7f:a0:0b:02:87:ad:17:df:81:11:6a:38:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.144.0/22
78.155.96.0/19
IPv6:
2a02:eac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43435
62237
Signature Algorithm: sha256WithRSAEncryption
ae:a4:8e:41:ab:be:9b:f3:d2:b7:45:34:32:a9:83:db:f2:cd:
b7:73:80:90:73:0c:68:50:d6:ae:1b:cc:e5:04:b3:5a:d0:66:
21:ca:45:c2:b2:76:8d:5d:86:cd:9c:5a:8c:ab:39:0b:26:af:
29:72:b1:f5:e2:91:e7:21:d8:4d:47:4e:43:56:a4:29:73:15:
55:58:51:e0:f3:40:5c:9a:1c:dd:5a:71:ab:86:fd:77:8a:1b:
47:e6:73:24:3e:cb:40:2a:f2:92:69:0d:75:25:1e:31:3a:2c:
47:44:9e:62:a6:91:0a:5a:c6:c0:cf:3f:f3:41:1e:cc:64:d6:
b4:6b:b4:6a:8b:a1:3a:5a:b4:40:8e:b5:3a:f2:78:db:49:6b:
d2:bc:29:66:32:46:f8:2f:f8:9d:f4:c9:a1:d3:c2:df:1f:eb:
05:96:0f:c4:4d:71:bd:b4:e0:0b:a4:22:47:94:e4:00:41:44:
ba:ed:c9:71:91:2d:ca:39:8c:02:48:a0:35:43:96:c3:c0:b4:
34:f2:af:c5:36:dc:70:e9:99:69:bf:64:ef:41:2b:f8:a5:f9:
09:eb:f0:4a:a9:29:06:38:ca:aa:a4:8a:14:c6:fb:ca:2f:b3:
21:42:d3:c5:bc:8e:09:03:15:6e:37:bd:32:63:b8:a1:5e:bd:
49:f8:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 21:22:40 2024 by rpki-client on console-ams.rpki-client.org