Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer (raw, json)
Hash identifier: zcCVsGyh6UePutjylmWTwl2TtkoxxcZsQKd76B3PaLc=
Subject key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EF92A73DDADE8B578C9649D621038
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44741
IP: 92.39.144.0/20
IP: 2a07:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f9:2a:73:dd:ad:e8:b5:78:c9:64:9d:62:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:cc:8b:40:75:a4:a7:c0:73:9d:e1:b8:4d:
95:d3:e3:d3:58:e5:87:a3:33:5c:36:10:cb:d6:36:
9b:89:e4:a6:b8:f6:8c:73:87:19:88:b0:a5:17:02:
77:13:4d:ac:22:36:82:1d:fe:71:79:eb:71:23:74:
8b:68:08:d0:72:4a:dc:16:48:1b:12:0d:6c:75:15:
c6:34:d4:23:5e:cc:e9:0c:e5:d6:90:a1:74:7f:e3:
f4:26:8d:0a:81:e7:3d:e6:22:ef:de:83:f3:f0:52:
5f:0d:89:e2:44:03:9d:75:2c:79:fb:52:80:93:5f:
1c:77:62:c9:23:2b:a1:15:44:9e:93:b5:b0:ac:b3:
48:be:0d:6b:93:fe:61:dc:42:97:c3:df:f2:c5:47:
6a:59:5d:57:1b:11:b2:21:da:14:82:f1:9c:0f:86:
cd:ab:de:2f:0c:d9:91:43:4c:03:42:4b:55:34:31:
42:b0:67:49:75:2d:ad:c5:a9:20:22:54:e4:c2:c5:
12:7b:46:a9:5b:3d:10:94:d7:e5:fc:3d:33:65:d6:
3c:f1:72:8d:7f:4e:3b:43:b8:79:ac:4b:56:07:64:
16:88:7a:da:c6:ed:67:dc:c8:ce:a8:7a:dd:96:71:
45:e1:de:05:30:4d:06:a2:a8:9e:3b:f4:6b:b8:73:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.144.0/20
IPv6:
2a07:b840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44741
Signature Algorithm: sha256WithRSAEncryption
75:bc:b5:1e:84:d0:00:5d:65:31:ed:55:4b:dd:d4:f9:0c:30:
ff:a6:09:bd:86:c2:9c:69:89:c0:9b:cb:09:f8:3c:09:7c:76:
95:27:d0:0e:09:7f:70:fd:e2:fb:6a:7d:cd:19:f3:0e:ae:c5:
4b:97:9b:d8:e6:49:51:c7:ad:65:bf:f3:25:bb:a8:2c:8f:03:
e9:42:0d:ed:28:41:79:08:be:61:de:95:fa:95:3a:f2:60:ae:
54:f1:23:75:c7:ec:f4:69:5b:ce:cb:9a:05:67:d8:fd:42:50:
1a:e4:3b:c0:6c:23:d8:02:ce:b0:6e:f1:b5:7e:28:1a:21:ea:
65:d7:8d:c4:ac:c1:dc:6f:6a:90:27:56:16:6f:f3:91:21:f9:
93:8b:3e:03:5e:fa:96:19:3a:48:d4:fe:b7:29:3a:0f:a0:ef:
82:46:27:0d:38:9a:1e:c4:11:db:35:ca:56:b0:25:72:ac:1d:
86:f4:21:d6:6f:01:36:82:a9:b1:59:fe:d9:74:0d:34:7b:15:
09:40:87:3a:a7:b4:c9:06:82:19:8d:19:ca:fb:48:3f:68:41:
2f:6b:62:98:ad:d7:96:00:3d:84:0c:e3:a2:0e:d4:78:ca:f5:
fa:2e:15:8f:0d:e8:4f:cf:4e:27:ca:a7:1d:52:a4:2c:59:94:
2d:6b:5b:48
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbvkqc92t6LV4yWSdYhA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2JiOGZjY2M2ZDZhYjcyYmE1Mjk0YjA5OTg1ZGU3OTllYTA2MzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1jMi0B1pKfAc53huE2V0+PTWOWH
ozNcNhDL1jabieSmuPaMc4cZiLClFwJ3E02sIjaCHf5xeetxI3SLaAjQckrcFkgb
Eg1sdRXGNNQjXszpDOXWkKF0f+P0Jo0Kgec95iLv3oPz8FJfDYniRAOddSx5+1KA
k18cd2LJIyuhFUSek7WwrLNIvg1rk/5h3EKXw9/yxUdqWV1XGxGyIdoUgvGcD4bN
q94vDNmRQ0wDQktVNDFCsGdJdS2txakgIlTkwsUSe0apWz0QlNfl/D0zZdY88XKN
f047Q7h5rEtWB2QWiHraxu1n3MjOqHrdlnFF4d4FME0GoqieO/RruHOy+QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDO7j8zG1qtyulKUsJmF3nmeoGNIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzU2Yjg4
Yy1iYTk1LTQ3YTctOGFmOC0xMjkwN2M5OWZhNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNTZiODhj
LWJhOTUtNDdhNy04YWY4LTEyOTA3Yzk5ZmE0OS8xL003dVB6TWJXcTNLNlVwU3dt
WVhlZVo2Z1kwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEXCeQMA0EAgACMAcDBQMqB7hAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCuxTANBgkqhkiG9w0BAQsFAAOCAQEAdby1HoTQAF1l
Me1VS93U+Qww/6YJvYbCnGmJwJvLCfg8CXx2lSfQDgl/cP3i+2p9zRnzDq7FS5eb
2OZJUcetZb/zJbuoLI8D6UIN7ShBeQi+Yd6V+pU68mCuVPEjdcfs9GlbzsuaBWfY
/UJQGuQ7wGwj2ALOsG7xtX4oGiHqZdeNxKzB3G9qkCdWFm/zkSH5k4s+A176lhk6
SNT+tyk6D6DvgkYnDTiaHsQR2zXKVrAlcqwdhvQh1m8BNoKpsVn+2XQNNHsVCUCH
Oqe0yQaCGY0ZyvtIP2hBL2timK3XlgA9hAzjog7UeMr1+i4Vjw3oT89OJ8qnHVKk
LFmULWtbSA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:41:50 2024 by rpki-client on console-ams.rpki-client.org