Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
File: MJAbMGF-hmq8nOULrb6IRl048Dc.cer (raw, json)
Hash identifier: M95sv9YFen/GktcuiBxFVNVuOm7as1EqoVK7vddcZCg=
Subject key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F619E8DA4A2A8D6C8E2B00ECC0003154D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 May 2024 08:28:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214985
IP: 5.42.204.0/24
IP: 2a14:1400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:9e:8d:a4:a2:a8:d6:c8:e2:b0:0e:cc:00:03:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 08:28:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30901b30617e866abc9ce50badbe88465d38f037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:b2:04:ac:f7:cb:e0:b7:ce:51:3f:fd:65:
d8:45:69:18:c7:c2:40:7b:39:2d:e8:7a:b1:6a:96:
e7:d3:73:00:b4:fd:26:55:dc:c6:fe:05:de:80:56:
8d:a2:9a:63:c2:36:8b:cf:10:fe:09:bd:8f:43:c1:
86:e2:7c:95:1a:cf:3f:bc:aa:b5:7c:be:d3:dc:14:
f0:58:11:1b:21:5f:33:d8:e3:0f:44:c3:81:80:5a:
be:f4:e0:2d:12:98:72:d8:2a:5a:4b:19:85:ee:ca:
67:65:c7:bd:34:69:30:35:9a:ab:85:43:72:1e:7d:
a9:9d:95:9b:79:60:c0:3b:4b:31:13:95:08:f3:33:
32:7d:a4:47:2a:bf:a3:6d:3b:93:69:83:9a:01:0d:
8d:45:ba:11:ce:66:38:3d:70:46:2a:46:09:aa:42:
68:eb:79:f4:ea:30:b8:11:20:3a:41:00:51:f9:a0:
b3:25:09:10:ef:81:4e:2c:0c:8c:f3:0e:a4:7b:92:
e6:a8:5c:90:ed:63:4c:d6:34:10:67:af:d1:1f:97:
94:3e:82:38:d4:db:fa:ce:aa:3e:dd:1f:85:e3:ea:
56:cb:c6:4b:b3:1a:b3:27:af:3e:bc:83:9c:a0:c0:
fa:7b:f1:f1:1b:d9:4a:0c:3e:ed:de:34:f7:ba:f8:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.204.0/24
IPv6:
2a14:1400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214985
Signature Algorithm: sha256WithRSAEncryption
80:63:77:fb:e2:44:80:bb:00:c6:12:56:3f:3f:23:99:a5:72:
0d:29:5a:17:a1:7d:0a:6c:15:92:a5:25:53:dc:e7:66:e5:52:
32:9e:aa:12:99:e0:bb:f3:d9:8e:5e:b2:95:89:64:98:61:05:
13:0e:05:4c:90:16:bb:07:dd:10:0b:09:ec:a0:05:1b:89:43:
54:7b:15:e9:ee:2f:f9:22:14:18:81:4d:2b:df:4b:ef:f3:7a:
c8:42:03:35:1d:26:17:10:d7:bc:96:e0:42:2f:ff:16:86:33:
11:87:fb:b2:94:98:75:9c:58:ab:e8:1f:44:f5:5d:c4:33:09:
f7:e8:96:32:4b:71:24:fe:ed:1b:0d:ff:e0:95:a6:64:34:1d:
74:73:5c:ee:d6:72:34:99:d7:be:4e:d2:66:c8:9e:4c:8d:e3:
b5:6d:39:36:0b:36:fc:e3:5f:91:a0:78:31:d1:43:40:de:fa:
dd:8e:be:9f:2d:86:e9:80:49:0a:3d:5b:d4:57:31:d9:ad:2d:
3d:1e:7a:9c:72:b9:e6:3a:3d:05:ef:02:1f:01:23:82:24:cd:
2c:8c:54:0e:42:e5:e7:a5:84:53:41:04:39:f9:c2:01:71:03:
da:2c:ac:08:6e:bf:8c:37:b4:ec:50:b6:71:4b:d3:93:64:10:
b2:de:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:18:40 2024 by rpki-client on console-fra.rpki-client.org