Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer (raw, json)
Hash identifier: /H5IBumqxGzz6pZwmY987kHuAqIbBBxCSZGDIyKqz8w=
Subject key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01923018A072EAFCB372458A7F19D89B95A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Sep 2024 20:49:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.84.247.0/24
IP: 193.84.250.0/24
IP: 193.84.253.0 -- 193.84.254.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:18:a0:72:ea:fc:b3:72:45:8a:7f:19:d8:9b:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 20:49:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:d3:c4:30:d8:3f:72:54:bd:8f:12:c4:46:
2f:c8:c2:67:15:ce:dc:f2:33:69:49:b3:32:57:af:
74:8c:b6:7b:0e:e3:aa:df:4d:54:40:fc:eb:c8:22:
0f:90:7f:fc:7d:40:60:38:43:ad:36:2c:97:29:b9:
7f:f4:1b:08:14:83:4c:cb:e9:37:b0:96:ad:59:88:
4b:ac:e4:6e:af:2a:09:17:c3:c5:d1:f0:a5:c1:1b:
05:a5:33:89:01:d2:71:3e:70:c6:af:d0:8c:c4:9e:
1c:10:5e:bf:62:98:bd:ed:c8:14:aa:a9:06:fe:9f:
07:61:8d:8c:e9:27:44:6d:72:7a:9e:65:58:d3:1e:
8e:20:8e:44:dd:89:78:96:c2:b4:0c:55:21:4c:be:
f6:07:f5:16:4d:3a:d5:83:5d:27:1c:5b:b8:c7:a3:
3a:01:25:0f:13:c6:a9:5f:b0:e2:5b:59:93:22:0c:
15:2e:30:2d:01:a1:8e:8f:13:0c:57:4c:8d:81:15:
12:04:0f:32:df:00:37:f4:04:5c:82:b8:48:d0:06:
a6:1f:cb:4e:b2:32:4e:c7:f0:38:c6:ca:35:3a:76:
d9:c2:3c:b9:fb:7f:f1:b0:9d:29:68:cc:1d:5a:70:
58:cc:04:8d:89:da:a3:46:36:7e:03:71:d0:3e:0d:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.247.0/24
193.84.250.0/24
193.84.253.0-193.84.254.255
Signature Algorithm: sha256WithRSAEncryption
57:ff:7e:96:e6:a2:2e:13:af:d1:45:cf:55:e2:ed:05:9f:c7:
4f:2d:70:91:c7:77:2f:63:b4:b1:f9:1f:a9:ba:bb:19:50:d3:
88:73:8d:07:97:8a:57:1b:de:a8:ca:83:b9:4e:80:c8:f0:62:
78:ce:b9:2e:0d:81:c7:89:fa:30:e7:56:0c:e3:93:7a:5b:6a:
5e:2b:cc:60:c1:16:3d:bd:42:b4:51:ca:5f:ca:42:bc:55:a4:
fb:f7:e9:4c:d1:e6:47:d5:5a:ac:ed:db:17:f0:c3:c2:fa:21:
32:ba:f9:ea:44:29:a2:25:d1:0e:c4:2b:52:a1:72:33:12:b1:
9d:03:5c:8d:d6:73:63:0b:71:82:28:9c:62:12:1c:0d:63:fa:
74:17:ce:ec:77:7d:7b:22:53:bc:d8:19:a7:25:c9:e8:53:58:
11:68:95:97:a0:3a:6e:41:e2:24:11:d0:0f:12:42:86:93:36:
a0:1b:29:00:99:c3:f5:e7:01:fa:7d:36:52:19:e9:60:70:0a:
84:21:7b:0c:28:66:5a:85:26:ea:c2:68:2a:31:44:34:31:e6:
5d:57:5e:bf:29:f8:3c:5d:25:74:bf:54:05:34:ab:96:ef:1f:
e4:92:65:88:1b:ea:dc:46:f2:a2:79:a8:69:96:a5:f9:a8:95:
54:0c:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:15:01 2024 by rpki-client on console-ams.rpki-client.org