Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
File: MFTtpIzl_KSJJbrLoUeMisotOcw.cer (raw, json)
Hash identifier: O8GVBUTqzJzKHuvL0zPmig9LY4GMWswr5rbJHvl7IGk=
Subject key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7951E002712DB45FDF69DF7C31DBC43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213266
IP: 193.46.78.0/23
IP: 193.46.222.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1e:00:27:12:db:45:fd:f6:9d:f7:c3:1d:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:dd:f2:42:d1:a9:2e:3c:5f:89:ec:b1:07:
33:43:54:d3:b5:69:7d:7d:02:80:f0:51:ca:11:35:
d7:c0:72:1a:85:2f:1f:86:21:8e:e0:36:1f:c2:79:
ae:9e:de:c4:1a:54:e3:d4:23:54:da:3f:36:4a:a9:
fa:85:99:8f:8d:e3:e1:b1:d5:58:ed:ca:0f:54:03:
e8:6d:b2:b7:c1:3e:d9:5c:1a:28:af:a6:96:b5:b4:
ff:02:57:64:d7:bf:0f:86:47:be:34:88:a7:d2:5a:
85:6a:20:de:d1:f8:70:d9:cd:c1:5c:be:cc:11:f4:
3e:71:9b:60:8c:c8:00:31:da:d6:3e:3e:cd:4c:cb:
92:85:52:ba:91:69:b4:ac:c0:f5:bc:2c:c8:7d:97:
4e:de:0b:0d:99:f6:ba:9f:70:c6:16:21:e2:18:24:
8b:a0:f5:e6:30:89:75:41:45:cc:74:4b:bc:96:1a:
7b:f4:a0:8f:81:2b:d4:ff:1a:4c:61:e6:01:37:39:
f6:f8:69:d3:99:6a:b8:ec:17:e8:6c:1d:6a:fd:34:
b9:6f:5c:33:23:80:0d:34:0a:44:b8:03:a3:0b:95:
64:0d:7b:84:16:d6:e5:47:28:38:53:9c:db:bb:8b:
db:70:d3:f8:e6:33:9a:64:03:37:4f:49:2d:2b:38:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.78.0/23
193.46.222.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213266
Signature Algorithm: sha256WithRSAEncryption
13:4f:3f:fe:14:8e:d5:d3:02:c5:34:4e:21:10:7c:d5:73:ef:
ae:fa:4a:33:c3:89:e7:b1:aa:30:27:c4:d6:18:25:f3:b6:c0:
f8:ab:08:29:44:8f:7b:77:d8:ac:9b:86:df:65:63:55:14:3d:
35:3e:3d:41:4e:e2:59:d3:0b:c7:3e:b1:4c:d5:1a:bd:01:94:
43:70:75:11:8f:16:0d:53:19:af:d8:94:60:4c:2a:fe:74:c5:
4c:bb:b7:36:05:75:23:67:52:5c:08:6b:b5:58:ed:6d:35:5c:
85:96:26:8b:ac:82:f9:2f:0e:b0:74:00:dc:1a:7e:82:bd:a9:
8f:d6:53:c2:b1:ff:9a:d2:77:0f:ed:a0:0b:13:ec:c9:fc:7c:
ac:4f:e2:a5:89:1c:19:71:da:1b:8a:ed:c6:2c:06:14:72:38:
b2:b3:6d:03:10:79:26:a3:d6:0a:90:eb:71:8f:82:d4:80:a0:
ad:9d:13:f5:26:cf:ef:13:37:d4:e1:0b:d4:4e:ac:51:49:4c:
6c:6d:f3:e2:5a:52:4b:f8:06:15:4b:8e:af:83:5a:95:ed:d3:
de:03:35:6a:67:24:23:ff:de:de:be:45:a5:29:61:a3:1b:4a:
d1:36:d8:58:19:cd:74:f5:4e:33:c7:ee:1e:d8:60:da:c2:89:
2c:b8:f8:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 13:12:22 2024 by rpki-client on console-fra.rpki-client.org