Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
File: MMQJYT_qCitELOES6cvbSF4BGI8.cer (raw, json)
Hash identifier: gQ3uImn86anPniTlbb47H+qpv9OFAlq25V26V1p8VKs=
Subject key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DF84F017B4E7283945F82284F6AB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 1887
AS: 8308
AS: 15606
AS: 59832
AS: 204679
AS: 211155
AS: 211655
AS: 212422
IP: 148.81.0.0/16
IP: 192.102.225.0/24
IP: 192.195.72.0/24
IP: 193.59.0.0/16
IP: 194.181.0.0/16
IP: 195.164.0.0/16
IP: 195.187.0.0/16
IP: 217.9.160.0/19
IP: 2001:7f9::/48
IP: 2001:7f9:c::/48
IP: 2001:a10::/29
IP: 2a00:1488::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f8:4f:01:7b:4e:72:83:94:5f:82:28:4f:6a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:4a:cb:0c:e2:c4:a6:5d:17:78:0c:d5:1c:
91:07:65:7d:ad:94:33:06:08:20:14:2c:b2:8e:40:
97:d4:fb:b0:03:ab:4f:7c:ac:d6:ff:15:ff:f7:32:
ac:33:b9:76:04:a1:63:d1:b8:48:73:f9:26:95:7f:
6f:b4:68:74:10:33:7d:86:12:1a:bf:50:90:df:be:
1a:12:10:d0:63:64:c7:a9:82:27:cd:96:2e:c8:4c:
af:9b:11:5e:41:a0:b1:0c:66:d2:0f:c4:1d:d9:48:
e8:b8:d2:cd:f9:93:25:8c:b1:cd:b6:89:3e:6c:25:
8d:20:53:1a:d3:46:26:a2:06:1b:12:0e:76:43:b0:
9a:46:1d:a6:39:d3:c6:0b:13:73:43:91:f5:db:a0:
e3:57:0c:4e:56:f0:22:d3:3c:c3:08:d1:2c:a0:dc:
45:00:a2:66:de:3e:42:83:cf:a1:c8:64:d5:ab:25:
6a:d2:36:79:bb:65:32:36:26:1e:14:c3:65:89:df:
9d:75:c9:3a:2e:5e:13:26:8d:ae:17:88:cb:35:45:
52:9f:96:9a:07:9d:0a:d3:8e:0e:c2:52:7b:58:0f:
9a:33:56:eb:ac:ea:30:c1:b9:37:ca:f5:3e:50:f5:
c7:21:88:5f:83:50:60:2e:ab:71:bb:51:80:36:f6:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
192.102.225.0/24
192.195.72.0/24
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/16
217.9.160.0/19
IPv6:
2001:7f9::/48
2001:7f9:c::/48
2001:a10::/29
2a00:1488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1887
8308
15606
59832
204679
211155
211655
212422
Signature Algorithm: sha256WithRSAEncryption
58:9c:b2:6f:cc:dd:28:1e:d6:6d:dd:dc:df:4a:d1:fa:57:58:
d6:ee:ce:8b:34:5a:52:d2:05:00:dc:dd:d7:8a:64:3a:a4:eb:
ea:20:6a:df:14:b2:fc:7d:a9:71:61:af:62:b7:fe:18:a2:14:
b9:93:30:8f:b9:0c:0f:75:57:b3:5d:b3:50:ee:24:38:58:2e:
e7:f3:48:cc:42:8c:e2:62:b1:10:37:10:f8:ba:76:8a:cb:9e:
f2:0c:91:aa:c8:35:6a:a2:17:5f:0c:e1:c9:49:df:9d:05:62:
90:e8:05:7d:aa:18:15:b9:01:31:ff:c7:a8:33:f7:96:bd:b5:
54:8c:78:66:91:8a:59:e1:3c:9f:fb:5a:3f:27:14:56:87:e2:
79:70:9b:4d:68:6b:2c:f1:fa:a5:95:20:75:69:86:5a:11:47:
61:be:53:78:36:4a:b1:62:61:31:16:89:10:99:38:07:86:8c:
58:71:97:00:14:3c:15:32:39:3d:1a:c3:a6:68:e8:08:99:d1:
1b:5a:0f:58:ab:00:7b:89:25:78:fa:d1:9c:f8:2c:8f:c6:8d:
4a:fa:0e:14:f3:d2:d3:ae:26:7f:12:38:6e:a5:e8:10:b8:28:
bb:07:b1:d0:9f:8a:c5:cc:1c:44:b8:b3:68:2c:e3:03:d1:cb:
22:7f:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:04:09 2024 by rpki-client on console-ams.rpki-client.org