Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer (raw, json)
Hash identifier: Sf9nvDeOI7ZJCwC2lhoLaCWUkWT1i5ZIrMcDCI18Gvo=
Subject key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42559792DDEB9FEFDA1660FC264B316
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58350
IP: 176.115.0.0/19
IP: 2001:678:258::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:79:2d:de:b9:fe:fd:a1:66:0f:c2:64:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:b6:74:69:19:eb:3f:52:6a:d5:a6:ea:55:
4c:ed:c6:10:65:47:f0:1a:1c:a3:b3:1d:cc:a4:20:
e7:db:15:fd:be:c8:59:c5:65:7c:db:1f:24:32:97:
4e:78:cf:09:26:33:25:8c:74:30:ae:d2:28:dd:4c:
13:0a:6d:a7:c6:e2:bd:b4:33:21:9e:1a:56:32:5b:
bf:fa:f2:53:ab:4f:17:b1:e3:db:e5:47:83:29:1d:
78:9e:ea:f2:09:43:a5:48:47:0b:97:15:29:72:12:
f0:6c:20:b7:a7:42:b7:22:c8:5d:ae:01:c3:e1:ab:
96:de:0c:b6:74:85:3c:f7:42:f2:54:d4:dd:24:72:
1d:67:0b:8b:d9:10:4f:ed:d4:4f:dc:de:1d:c0:bd:
11:58:b9:08:df:01:98:0e:41:03:60:36:4e:c7:6f:
06:bb:ac:ad:7d:56:47:2b:7c:85:31:f5:54:fa:1e:
8a:89:d2:cf:bf:7c:d3:cc:9f:c6:93:e6:0d:46:00:
bc:be:d2:ea:78:2c:62:42:f9:ca:0c:6a:96:f0:d9:
96:71:26:89:6f:54:b9:71:ec:6a:6f:80:f2:e1:02:
1e:7c:dc:34:e0:b0:d9:45:87:2d:8a:d5:5f:16:50:
d4:50:71:47:82:79:00:6e:ea:17:fa:3c:20:1a:60:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.0.0/19
IPv6:
2001:678:258::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58350
Signature Algorithm: sha256WithRSAEncryption
a8:6a:61:05:e2:72:ad:54:93:b1:d3:f5:c3:59:6e:0c:65:30:
1c:47:72:56:40:7c:ef:26:cb:fc:e8:84:b6:c9:9a:10:7c:31:
a7:9c:95:c1:d1:a3:4d:d5:34:e4:05:95:da:b8:75:a8:af:f0:
fb:ac:57:ec:de:9a:5e:69:a6:ce:ed:8c:bc:1a:93:87:a0:84:
4b:96:77:c1:c7:f2:28:4c:cd:a9:ed:aa:d4:a5:2a:a3:6c:54:
c8:1c:db:ad:7d:46:a9:cc:39:32:18:a6:a1:5c:16:db:b6:9c:
bd:08:68:45:d3:a6:52:7d:3c:e1:59:e0:3c:27:3d:1a:6b:12:
f4:89:be:16:4f:6d:bf:44:f8:38:e9:14:7c:69:7d:85:3d:5f:
50:59:24:68:b6:09:39:e5:24:ac:80:5e:8a:df:0d:b8:7d:7a:
a5:d0:d9:b9:fa:8d:27:16:54:2c:47:85:a2:83:a1:9b:73:2c:
74:83:3c:89:a2:a4:04:14:d5:82:4a:9b:94:a3:cc:e4:84:0a:
47:2b:c3:8d:b3:99:82:44:10:f4:91:6d:30:87:56:bc:50:8e:
ba:e5:97:73:85:70:ef:91:fd:9a:54:28:b0:20:42:08:ac:5a:
5e:00:b0:26:fe:a6:ea:c7:33:71:9c:b7:df:b5:b7:b0:fb:14:
4e:0b:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:57:08 2024 by rpki-client on console-ams.rpki-client.org