Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
File: M3EM-B0hd3qY09mZ3B5urgVffDw.cer (raw, json)
Hash identifier: T35ppBlBZbOg13NAtPELlCg+bhc22i5BdOJvhyjPc8Q=
Subject key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AD6966617B88DE6AA8CC950CFB81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47698
IP: 91.206.174.0/23
IP: 91.208.103.0/24
IP: 2001:67c:394::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d6:96:66:17:b8:8d:e6:aa:8c:c9:50:cf:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:14:dd:15:f8:58:4b:5c:db:01:d5:4b:73:
27:ec:86:79:ce:a3:b5:94:bf:95:49:c0:06:0d:0c:
49:af:ad:69:c2:65:c9:56:07:cc:e4:50:58:f2:27:
12:52:ac:2b:b1:de:12:ab:38:67:dc:e1:94:ec:6c:
cc:2f:a2:c7:9e:66:96:8c:a3:05:bd:68:f3:6f:92:
ba:43:83:78:11:8f:e2:d2:d4:33:2e:ce:78:7f:02:
cf:19:e6:72:94:a1:03:8d:f9:9a:90:a6:fb:51:4b:
7c:7c:39:9d:9e:e4:c0:62:17:b3:e0:0f:5e:31:ca:
f2:e4:e2:79:29:25:e1:18:b9:d6:88:ac:02:4a:32:
13:72:5c:52:06:48:f0:b1:d4:b9:3d:a3:80:b2:2f:
0c:e5:04:b4:91:f5:b0:6d:fb:d5:14:2b:c8:fd:88:
b3:94:5b:2d:b7:b5:45:b0:ca:1c:0b:0e:ca:1f:74:
f7:e7:41:1c:d2:9a:be:0e:5f:7b:ab:50:8c:f3:a0:
c0:a2:f4:f8:b3:62:36:33:e9:74:51:88:b7:2c:f2:
4a:98:68:2b:b0:c5:71:04:2f:bc:17:72:4d:d3:ff:
24:e5:e3:b0:c7:b3:37:2e:38:4d:81:e6:52:42:4f:
71:f2:b0:48:ba:6a:29:09:3e:e7:d8:2d:b9:c0:9f:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.174.0/23
91.208.103.0/24
IPv6:
2001:67c:394::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47698
Signature Algorithm: sha256WithRSAEncryption
57:9a:59:1d:45:dc:33:e6:fe:ee:0f:8a:9d:51:b4:86:36:02:
4e:05:3a:03:09:55:78:6e:b0:8c:08:27:7b:56:ce:2e:6c:8c:
6d:df:9f:a8:44:71:d0:f6:32:ec:2d:2c:b2:88:e0:87:09:15:
8a:12:f8:bd:47:52:ff:60:f8:85:84:2c:9d:ed:0f:c8:79:24:
64:99:bd:f4:81:9e:14:4f:07:91:d9:ab:0a:2a:80:49:50:31:
27:23:d4:c9:5f:b1:72:d5:2a:cf:f3:70:65:4d:34:3b:72:f0:
45:5c:1c:11:30:40:c2:75:39:18:19:cb:66:0b:f4:74:d3:5e:
48:25:26:35:31:69:09:bf:6c:1e:09:43:48:de:01:f2:98:12:
65:23:f7:85:d5:e8:3b:ef:3d:04:c4:3c:35:d7:8b:e6:4a:52:
46:bf:80:94:42:d2:d2:57:dd:81:8f:be:06:e8:95:c6:fc:f4:
d8:45:7d:79:f4:ae:7f:2d:b1:ff:a8:1c:ad:fd:1a:51:75:d0:
c9:3c:37:4c:5a:93:5b:68:7e:ed:e6:21:2c:e2:92:67:68:aa:
df:b5:26:e7:84:d2:db:0b:a4:d9:b5:80:50:db:24:42:12:8d:
73:d9:10:b7:45:d3:f5:26:da:58:45:a4:ac:7a:12:e9:34:d8:
73:32:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:12:12 2024 by rpki-client on console-fra.rpki-client.org