Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer (raw, json)
Hash identifier: 7CqGJEmcCb0/IvFKtRzV42Jux1s6FMPTlc0Wt55RL0g=
Subject key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CD2D41534BE1EF4FF1FB84429446C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:26e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:d2:d4:15:34:be:1e:f4:ff:1f:b8:44:29:44:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:06:67:62:ac:bd:ca:e1:2a:8b:73:dd:f7:
63:8c:b1:41:cc:67:3c:34:d2:b8:9b:12:bb:63:2b:
fd:36:5a:43:16:1a:a4:de:73:45:df:52:86:23:84:
c8:4e:3d:81:2e:70:89:e5:49:7d:92:61:59:aa:cc:
e1:cb:ab:8a:b1:f7:de:ef:66:be:a1:e9:d3:24:2e:
92:1a:a9:e7:cb:ca:e6:35:25:e6:68:dc:6d:97:f5:
b8:49:77:59:78:be:df:d0:68:e2:26:14:09:37:f4:
a5:63:02:4d:27:80:38:65:54:9e:95:02:63:3f:08:
85:99:ae:de:ba:37:44:d2:8a:89:af:bc:e6:71:bd:
57:62:5d:ee:c9:32:85:84:c9:e3:1d:92:6e:07:8d:
cb:98:4b:67:7b:b6:ba:ce:ab:5e:49:15:90:1c:74:
30:0a:ed:11:5c:af:ff:af:81:ce:7a:46:ba:50:99:
95:bc:18:05:df:02:05:9e:c4:19:83:e5:cd:03:9d:
2e:0a:ea:c8:9e:ec:8b:5e:4a:84:52:d6:43:4f:ff:
eb:a0:d7:29:a3:42:e5:0b:53:45:79:4a:9d:e1:7e:
8a:da:7f:0f:08:29:11:c4:07:61:ac:27:22:1d:4e:
c2:38:83:89:48:83:7a:68:40:f6:e1:1e:8b:a1:e4:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26e4::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e8:cd:83:7c:15:94:4e:79:e7:92:68:90:fd:4a:2d:2e:2d:
97:c3:cc:57:05:f2:83:14:08:60:b2:b4:a6:b6:14:5c:d1:8b:
c7:b5:58:72:6a:f1:cd:7b:21:55:76:93:42:4a:4a:a5:5c:e5:
11:d0:a3:4a:6f:3a:27:7e:c5:d3:d5:20:b0:db:41:1e:3c:f0:
f4:2b:ad:fc:50:ad:b1:4c:cd:61:95:5a:e5:52:fe:17:39:c7:
fe:e9:9a:55:b5:7a:a3:95:0f:62:44:62:7b:6d:d8:6e:62:ae:
5e:28:fc:0d:17:65:7a:e9:79:c8:a7:1a:5e:16:3e:79:7c:da:
88:b0:61:ef:ac:90:46:74:b5:43:29:37:5c:81:fb:6f:73:7c:
63:f6:96:64:89:f9:0d:54:30:76:2c:e5:35:4b:98:b2:28:1d:
b6:1e:0c:fc:f0:4f:e5:07:3e:3c:93:15:5f:87:b9:92:aa:a5:
95:77:60:e9:67:44:03:b3:17:46:f2:13:1d:a3:6b:eb:7e:27:
be:f9:0b:12:6b:49:b2:d2:74:61:13:ab:29:2a:bd:18:38:c6:
8d:b0:46:d6:20:94:df:9e:a3:af:11:bc:2e:3b:e1:d4:ff:84:
9e:3e:3e:e7:c1:34:36:6b:c2:cd:ea:af:de:f2:ad:02:53:5c:
5e:2a:c0:47
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzJTNLUFTS+HvT/H7hEKURsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFlM2ZjYTZmMTM2MjhlNmViODNjZmZlNWVkOGEwMWVkZDU5ZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiwGZ2KsvcrhKotz3fdjjLFBzGc8
NNK4mxK7Yyv9NlpDFhqk3nNF31KGI4TITj2BLnCJ5Ul9kmFZqszhy6uKsffe72a+
oenTJC6SGqnny8rmNSXmaNxtl/W4SXdZeL7f0GjiJhQJN/SlYwJNJ4A4ZVSelQJj
PwiFma7eujdE0oqJr7zmcb1XYl3uyTKFhMnjHZJuB43LmEtne7a6zqteSRWQHHQw
Cu0RXK//r4HOeka6UJmVvBgF3wIFnsQZg+XNA50uCurInuyLXkqEUtZDT//roNcp
o0LlC1NFeUqd4X6K2n8PCCkRxAdhrCciHU7COIOJSIN6aED24R6LoeRiHQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFDAeP8pvE2KObrg8/+XtigHt1Z6LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzkyY2U0
Yy1mMWM1LTRjOGYtOTlkZi1kMGQ3ZjJiMmE1ZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvOTJjZTRj
LWYxYzUtNGM4Zi05OWRmLWQwZDdmMmIyYTVlMC8xL01CNF95bThUWW81dXVEel81
ZTJLQWUzVm5vcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCbkMA0GCSqGSIb3DQEBCwUAA4IBAQAr
6M2DfBWUTnnnkmiQ/UotLi2Xw8xXBfKDFAhgsrSmthRc0YvHtVhyavHNeyFVdpNC
SkqlXOUR0KNKbzonfsXT1SCw20EePPD0K638UK2xTM1hlVrlUv4XOcf+6ZpVtXqj
lQ9iRGJ7bdhuYq5eKPwNF2V66XnIpxpeFj55fNqIsGHvrJBGdLVDKTdcgftvc3xj
9pZkifkNVDB2LOU1S5iyKB22Hgz88E/lBz48kxVfh7mSqqWVd2DpZ0QDsxdG8hMd
o2vrfie++QsSa0my0nRhE6spKr0YOMaNsEbWIJTfnqOvEbwuO+HU/4SePj7nwTQ2
a8LN6q/e8q0CU1xeKsBH
-----END CERTIFICATE-----
Generated at Fri May 3 10:10:12 2024 by rpki-client on console-fra.rpki-client.org