Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer (raw, json)
Hash identifier: FCHHDoCstBVbJN2OPJtHedLiElf9iSchmZTXTAhbgLQ=
Subject key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ED119D7B890B9266E80B0FF0269135068
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Apr 2024 06:58:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205053
IP: 185.226.64.0/22
IP: 213.134.5.0/24
IP: 2a0c:5e00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:19:d7:b8:90:b9:26:6e:80:b0:ff:02:69:13:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 12 06:58:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:b6:5b:40:f0:36:17:64:9c:29:12:8f:39:
0f:b5:68:a7:8b:39:43:b6:10:4a:14:06:fe:c0:c0:
59:76:3e:52:f7:84:69:3e:07:c1:ae:5e:9a:34:d7:
db:1c:fa:51:28:cb:e2:8a:48:df:8c:c4:29:62:11:
c5:3a:61:9a:76:db:12:3e:d8:70:72:66:26:3c:2b:
17:7f:fb:82:02:81:34:a9:a6:8a:4c:6c:c8:d2:4e:
18:89:ed:ff:9d:7e:56:10:f7:75:92:57:6d:26:c1:
62:a6:36:39:41:6c:f7:f6:95:73:8f:49:9f:93:51:
f9:ec:80:c5:cf:28:ae:08:1a:80:52:b5:f3:b0:c1:
c7:75:8f:78:1b:a7:61:b5:c0:76:6b:e5:c4:df:3a:
34:0f:76:35:89:6b:8f:0b:52:46:17:31:52:e7:98:
fe:ed:23:1c:be:be:68:8e:a3:0b:86:f7:bf:66:46:
5c:fd:51:aa:98:43:19:3f:46:1f:fd:24:f9:db:de:
a0:8e:4e:ee:25:5c:00:c8:a8:92:81:cd:73:62:e7:
7c:ac:24:40:f4:2e:8d:69:45:46:b2:d7:4f:30:8a:
73:03:4f:66:58:38:dc:4e:fa:70:ba:b5:84:9c:b3:
90:10:20:93:93:47:9d:33:5a:c1:19:54:eb:f1:60:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.64.0/22
213.134.5.0/24
IPv6:
2a0c:5e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205053
Signature Algorithm: sha256WithRSAEncryption
24:7b:2a:a2:33:65:7c:6d:ef:33:7f:20:40:1c:0e:6e:97:46:
ee:35:d3:6c:4c:68:b3:cc:91:fd:ea:36:f2:6e:a6:84:f2:38:
e9:68:ff:fe:9e:49:58:16:24:ae:bd:81:23:c1:7d:4d:d4:d6:
02:96:4e:0b:58:81:9b:d1:9e:7e:1a:18:85:81:40:54:82:b4:
f8:c7:4c:d3:83:ef:11:aa:e0:26:47:e2:4e:42:fa:6c:19:aa:
05:9c:d2:31:be:8a:a8:0d:4a:ee:d1:90:87:23:e9:9a:a4:2e:
b6:c4:de:43:a9:bb:f7:2d:c1:a6:1a:9e:8f:59:1d:b0:9e:4a:
96:2f:bb:a8:de:44:ff:37:3a:a2:be:51:80:98:55:d6:92:2b:
12:70:c1:7a:6e:23:e2:3e:f8:04:49:0f:d0:3b:8e:5d:9e:09:
80:42:80:3a:9b:2b:6e:ed:e5:4a:47:2b:e7:7b:82:54:69:22:
85:7a:8b:3e:0f:1b:ba:cb:be:98:b6:88:16:ca:e2:3b:0d:d4:
66:58:18:bf:f3:31:85:af:a6:c9:16:4e:b1:bd:c2:e0:dd:02:
7e:53:75:d3:7f:02:47:16:68:ea:1d:65:1f:9d:11:0e:2a:fd:
e3:ef:45:79:27:28:3d:72:fb:3d:42:90:2d:96:1d:d0:35:68:
30:19:65:46
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAY7RGde4kLkmboCw/wJpE1BoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDEyMDY1ODM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzRiMDk3NDNlZDJhZmQ2YWZiNDdjNTgzNjBlZTMxMTJhOTVjZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQq2W0DwNhdknCkSjzkPtWinizlD
thBKFAb+wMBZdj5S94RpPgfBrl6aNNfbHPpRKMviikjfjMQpYhHFOmGadtsSPthw
cmYmPCsXf/uCAoE0qaaKTGzI0k4Yie3/nX5WEPd1kldtJsFipjY5QWz39pVzj0mf
k1H57IDFzyiuCBqAUrXzsMHHdY94G6dhtcB2a+XE3zo0D3Y1iWuPC1JGFzFS55j+
7SMcvr5ojqMLhve/ZkZc/VGqmEMZP0Yf/ST5296gjk7uJVwAyKiSgc1zYud8rCRA
9C6NaUVGstdPMIpzA09mWDjcTvpwurWEnLOQECCTk0edM1rBGVTr8WDexQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2NkNDEw
Zi05ZGU0LTRkODItODA5MS01OWU3OTJmZTE0Y2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvY2Q0MTBm
LTlkZTQtNGQ4Mi04MDkxLTU5ZTc5MmZlMTRjYy8xL00wc0pkRDdTcjlhdnRIeFlO
ZzdqRVNxVnpUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCueJAAwQA1YYFMA0EAgACMAcDBQAqDF4AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMg/TANBgkqhkiG9w0BAQsFAAOCAQEAJHsq
ojNlfG3vM38gQBwObpdG7jXTbExos8yR/eo28m6mhPI46Wj//p5JWBYkrr2BI8F9
TdTWApZOC1iBm9GefhoYhYFAVIK0+MdM04PvEargJkfiTkL6bBmqBZzSMb6KqA1K
7tGQhyPpmqQutsTeQ6m79y3Bphqej1kdsJ5Kli+7qN5E/zc6or5RgJhV1pIrEnDB
em4j4j74BEkP0DuOXZ4JgEKAOpsrbu3lSkcr53uCVGkihXqLPg8busu+mLaIFsri
Ow3UZlgYv/Mxha+myRZOsb3C4N0CflN1038CRxZo6h1lH50RDir94+9FeScoPXL7
PUKQLZYd0DVoMBllRg==
-----END CERTIFICATE-----
Generated at Fri May 3 02:54:05 2024 by rpki-client on console-fra.rpki-client.org