Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
File: MBYKH8YoL1eCp6in6g7SBrlEQSM.cer (raw, json)
Hash identifier: Lf57IcfGFnlH+5+DgQ39oh2GaM2qNn9cfAVsGTqob9Y=
Subject key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0A4E55E36F6E1A251015AC44720A0A6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 16:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.183.100.0/22
IP: 188.122.32.0/19
IP: 2a13:bb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:4e:55:e3:6f:6e:1a:25:10:15:ac:44:72:0a:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 16:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:7b:d6:6b:a8:0f:93:4c:b2:f9:78:55:c6:
77:64:eb:b3:b7:a2:9f:b7:67:bb:50:77:cd:01:8c:
8f:06:1a:23:8d:64:58:bc:a5:ce:2e:9e:23:5a:4a:
bb:52:7a:cc:74:e9:5c:96:70:a2:e9:44:fb:74:d8:
7b:c3:f6:6e:88:49:22:84:19:9d:cb:fd:9e:66:73:
24:29:bf:9e:ef:b2:94:5e:e6:12:2b:29:17:ad:b8:
37:f9:e0:06:ba:3b:3d:df:96:2a:d0:f9:58:da:4c:
d6:75:e3:7d:d0:09:d2:a7:04:db:4b:08:02:0f:2d:
c8:5b:8e:0b:67:da:45:64:74:67:69:f8:c2:df:c7:
2d:db:9f:f4:86:97:0a:52:c7:e0:13:d4:78:a8:63:
1b:e7:dc:77:1d:60:75:f0:29:65:d2:a1:c2:e8:53:
ea:b8:84:53:8b:6f:24:10:09:b9:3b:e2:e2:0f:9c:
ba:d0:0b:57:51:47:b9:13:5d:b6:7c:79:7b:27:35:
f8:cc:03:7f:66:cb:1f:fb:43:51:39:72:18:d2:11:
46:d1:ba:b4:e8:af:52:f3:45:45:1d:45:3a:0b:4b:
67:c7:e3:78:cf:09:77:9a:7d:c2:e2:0b:5a:8e:db:
0a:89:0d:c2:ff:8f:2b:30:be:3f:74:8c:70:82:a5:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.100.0/22
188.122.32.0/19
IPv6:
2a13:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
6d:90:52:f3:a5:da:07:6d:e2:52:27:ff:c3:fe:33:1a:33:59:
ee:6f:84:1d:64:dc:cf:b2:dc:d4:70:38:e6:b3:6f:ba:ee:3f:
f8:8c:6c:36:db:1b:50:d4:76:4f:af:f0:98:26:7a:f9:fb:f1:
0e:47:44:af:49:21:3e:f7:34:6b:f9:d9:02:8c:ed:72:92:ca:
b6:74:00:07:6b:b5:4d:c4:81:26:04:f2:16:5f:c7:9d:52:5b:
11:e5:cd:81:a3:fc:66:a7:b6:47:27:bc:3e:34:e9:cd:f2:f5:
6e:62:f4:82:4f:fa:e2:24:13:f5:14:3d:d7:4b:9d:40:c8:f8:
10:b5:f3:20:62:98:dc:83:7b:3d:a6:de:ae:8b:1a:4d:f4:80:
5b:0a:89:c5:84:25:3d:29:38:4d:a7:41:2a:dd:c8:58:65:51:
d8:8b:14:36:25:d5:76:cd:0b:88:2b:4e:d7:ab:52:d8:eb:20:
92:87:35:70:cd:bc:ec:0b:51:28:0d:0e:c4:82:8d:47:d8:56:
c5:97:3f:cb:c1:20:d4:1c:01:40:6b:22:22:ae:8f:26:c1:27:
3b:d5:6f:5e:9d:10:3b:56:77:96:e9:9e:41:94:31:f7:37:d9:
a3:c9:77:14:e9:04:15:e2:23:ab:4a:ae:5a:86:6c:93:8e:a5:
0a:63:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:51 2024 by rpki-client on console-fra.rpki-client.org