Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
File: MFTtpIzl_KSJJbrLoUeMisotOcw.cer (raw, json)
Hash identifier: OryZYcRUyjPoYPad6MkOEX842MufI63GSKiRCub57uA=
Subject key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB90B3C2CDFB5577F7FD09C60E1BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213266
IP: 193.46.78.0/23
IP: 193.46.222.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:0b:3c:2c:df:b5:57:7f:7f:d0:9c:60:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:dd:f2:42:d1:a9:2e:3c:5f:89:ec:b1:07:
33:43:54:d3:b5:69:7d:7d:02:80:f0:51:ca:11:35:
d7:c0:72:1a:85:2f:1f:86:21:8e:e0:36:1f:c2:79:
ae:9e:de:c4:1a:54:e3:d4:23:54:da:3f:36:4a:a9:
fa:85:99:8f:8d:e3:e1:b1:d5:58:ed:ca:0f:54:03:
e8:6d:b2:b7:c1:3e:d9:5c:1a:28:af:a6:96:b5:b4:
ff:02:57:64:d7:bf:0f:86:47:be:34:88:a7:d2:5a:
85:6a:20:de:d1:f8:70:d9:cd:c1:5c:be:cc:11:f4:
3e:71:9b:60:8c:c8:00:31:da:d6:3e:3e:cd:4c:cb:
92:85:52:ba:91:69:b4:ac:c0:f5:bc:2c:c8:7d:97:
4e:de:0b:0d:99:f6:ba:9f:70:c6:16:21:e2:18:24:
8b:a0:f5:e6:30:89:75:41:45:cc:74:4b:bc:96:1a:
7b:f4:a0:8f:81:2b:d4:ff:1a:4c:61:e6:01:37:39:
f6:f8:69:d3:99:6a:b8:ec:17:e8:6c:1d:6a:fd:34:
b9:6f:5c:33:23:80:0d:34:0a:44:b8:03:a3:0b:95:
64:0d:7b:84:16:d6:e5:47:28:38:53:9c:db:bb:8b:
db:70:d3:f8:e6:33:9a:64:03:37:4f:49:2d:2b:38:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.78.0/23
193.46.222.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213266
Signature Algorithm: sha256WithRSAEncryption
8c:25:c2:d5:90:2d:24:fc:f7:bb:49:24:98:78:ed:79:9f:fe:
71:73:3f:3e:fe:db:e0:d8:6d:0e:50:73:bc:ec:3b:27:0c:39:
5c:c6:8c:ac:46:8c:30:07:14:e4:9c:1b:75:f3:9c:01:0c:37:
3f:1f:9a:1d:1a:c7:92:8d:7b:77:9e:9c:d6:8a:42:7b:57:fb:
f3:a5:e8:7e:80:ac:8b:eb:fa:cd:38:a4:0b:b5:c4:40:bb:e8:
29:a8:ac:7e:da:30:6b:f5:f2:34:7c:c8:0b:5d:b4:0a:5c:b8:
2a:7b:cf:2f:38:52:18:3f:16:a4:cd:bf:e1:97:9f:58:43:6e:
f6:9e:6f:9f:3d:f6:68:a2:29:d6:25:14:34:d7:17:20:70:ef:
e9:06:18:34:85:ba:cf:67:46:4f:4f:05:c6:6e:29:17:bf:72:
1f:b4:ce:a7:6b:2e:29:92:c2:45:1c:b7:f8:f6:36:0d:f4:99:
44:dd:e5:23:82:52:e4:47:58:b3:e2:6f:36:31:d4:15:64:0e:
d0:ba:4f:4d:5c:48:ab:b9:79:4a:aa:c3:a2:3d:2e:87:04:cd:
c5:31:a0:bd:3e:a3:04:9d:ec:d1:75:32:f6:e8:10:48:57:58:
43:41:57:21:e4:c4:b9:8c:95:6e:24:3e:e3:e5:4c:cd:5e:0c:
71:26:f6:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:31 2025 by rpki-client