Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.cer (raw, json)
Hash identifier: tyjveN5Vb/K4ueJdBtvKGqPiObUZlPQGTm9464fzTAM=
Subject key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8701859DA412CD76543618F7D6188A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199508
IP: 45.8.128.0/22
IP: 85.194.236.0/23
IP: 89.41.48.0/24
IP: 89.42.43.0/24
IP: 185.11.208.0/22
IP: 185.195.149.0 -- 185.195.151.255
IP: 195.192.250.0/23
IP: 2a03:6f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:18:59:da:41:2c:d7:65:43:61:8f:7d:61:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:9c:0a:d7:4b:08:f4:28:7e:42:bb:86:3d:
9d:8c:9a:e7:83:a9:df:d8:77:91:4c:c6:64:d2:67:
d5:82:8a:29:4f:e6:3f:4b:b2:d1:8b:dc:c7:8c:09:
66:60:a9:30:38:ea:4f:79:1e:f0:3a:fc:14:d8:f9:
57:01:38:b4:82:3e:4f:1c:ff:fa:fb:8b:ec:99:f5:
89:76:16:89:b9:09:4a:ec:98:67:02:14:5e:5b:15:
79:22:66:db:28:c6:0a:4b:93:ef:12:7b:41:9f:9f:
e4:71:e9:6b:5d:94:0b:fd:ce:5e:8d:7f:21:4d:b2:
85:0f:d7:3d:39:72:f8:01:a0:c3:df:1e:4e:fa:80:
79:10:6b:60:66:30:14:dc:9c:e6:0e:53:86:93:7e:
e7:8b:a6:87:b4:53:61:52:6f:be:bb:66:3e:ed:3a:
5b:17:52:7e:6f:ed:ec:0d:ba:17:42:49:24:db:02:
e4:77:f0:0c:cf:56:ba:b9:b6:ae:9e:38:dd:60:87:
9c:0c:8a:6d:ff:81:3d:dc:46:cb:fc:76:da:b0:24:
13:10:6a:a3:f3:f1:e0:38:d4:55:3c:30:8d:8c:ce:
75:32:db:df:c9:17:f0:00:28:8a:65:5a:bf:31:a7:
0d:39:d8:58:32:df:a7:12:12:45:63:f3:cf:f2:1b:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.128.0/22
85.194.236.0/23
89.41.48.0/24
89.42.43.0/24
185.11.208.0/22
185.195.149.0-185.195.151.255
195.192.250.0/23
IPv6:
2a03:6f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199508
Signature Algorithm: sha256WithRSAEncryption
39:88:b6:27:99:cd:f9:47:4a:23:9f:c2:bd:6d:1c:34:05:61:
a2:52:50:05:ca:5b:4c:f6:ef:96:fe:be:93:2f:97:77:49:d6:
ea:d7:47:2b:5b:64:2f:b2:b7:39:46:4e:9b:40:77:9a:09:75:
69:66:58:59:1e:5c:55:34:49:28:54:1d:a8:9d:50:b6:71:87:
78:22:dd:65:50:26:c6:a2:d5:b3:23:ab:b8:66:41:3b:86:ce:
2f:23:37:60:d3:90:a7:fa:18:a0:88:c4:c6:e9:ef:85:28:a5:
cd:dd:4e:8f:6f:07:7a:82:5b:cc:01:46:93:28:8e:c9:6e:00:
f1:08:ca:21:79:be:0a:ee:f2:c6:08:5b:27:2a:68:29:eb:cd:
9f:8a:38:3b:eb:af:2b:b4:68:b3:45:8f:49:12:33:3f:75:1a:
57:cb:d4:1f:ca:7c:34:1c:82:05:c2:54:02:0f:79:74:93:3e:
56:06:42:4d:e5:3c:9e:82:ac:d2:2e:7b:59:6b:bc:8b:27:5c:
e4:ff:a3:fd:6a:5d:ec:d0:2b:53:0f:8b:19:25:51:9d:d4:59:
62:31:4e:7b:4d:b1:91:0b:06:d5:67:f2:9b:32:ab:9a:e4:5d:
2c:85:b0:f5:62:b5:97:f5:b4:18:2a:59:bd:b7:55:3a:3c:c7:
a5:cb:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:10:22 2024 by rpki-client on console-fra.rpki-client.org