Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.cer (raw, json)
Hash identifier: UN0TNH9XnONTUl8MFQykgJquUh6xyqE1cOUhG1WeEyg=
Subject key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49340E11588CDBBF6CDF7591844082B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202032
IP: 185.54.80.0/22
IP: 2a02:4460::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:e1:15:88:cd:bb:f6:cd:f7:59:18:44:08:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:7c:ad:1d:95:79:12:e1:2f:58:8a:ee:e2:
e2:51:46:c4:3c:ea:b7:bd:23:38:c5:d7:e1:95:30:
e3:a6:31:f9:9d:58:47:68:10:ef:d4:75:ea:c1:74:
59:9a:ce:1d:3c:ae:56:bb:78:0f:01:1d:cc:e5:5f:
93:73:b6:03:e3:be:5b:c0:1a:72:02:11:fc:f1:fa:
5c:e7:b9:7a:8e:88:2d:f8:82:83:7b:ed:04:5b:b1:
77:6a:3c:4d:75:8b:f1:ed:01:3f:8b:eb:8d:ec:b7:
b8:a2:4f:6a:cc:f2:a8:66:91:24:62:c3:30:5e:9b:
35:03:ae:ce:65:74:ac:8a:3b:69:24:b4:b3:c2:8d:
dd:05:a8:52:db:cc:c4:01:e5:11:46:00:50:94:69:
17:a7:99:41:11:30:6d:d0:a2:a6:46:71:d2:71:a9:
cf:96:3f:a8:6e:29:90:c4:a7:8f:04:dd:0a:7c:ae:
d4:30:d5:fe:6f:6a:ae:7a:3a:b6:2b:1c:bd:13:f1:
0f:46:f0:22:1e:a3:da:1d:72:8f:37:09:81:0f:b3:
ab:9f:e2:5e:3a:c2:62:40:37:66:84:61:a1:5a:f0:
04:2c:6e:c6:72:b5:ed:4b:8e:d3:c1:e1:58:8c:b4:
01:87:4b:22:58:a3:5c:10:d3:3d:73:f8:c5:34:17:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.80.0/22
IPv6:
2a02:4460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202032
Signature Algorithm: sha256WithRSAEncryption
70:25:aa:2f:b1:3e:af:64:59:f0:df:4b:ac:12:e5:89:50:3d:
52:c8:d3:15:90:66:c4:7a:83:a8:bd:ae:4b:41:cc:8a:bc:a3:
6b:8a:4a:39:31:9b:42:b8:5e:d2:86:ff:5a:2b:88:ad:d0:f6:
98:47:0c:e3:a0:44:2f:05:d8:19:05:e6:5b:41:9e:1d:57:7f:
72:f6:f8:3a:98:2d:62:12:bc:89:34:ac:1e:5d:da:c9:a0:81:
93:f3:49:74:f4:86:45:8c:1c:a4:27:2b:e6:a0:f8:7d:df:c8:
57:f6:7e:0b:95:7d:86:30:0e:18:ae:71:ce:e6:11:ad:82:1a:
7a:29:df:72:be:42:98:df:60:61:55:37:85:3b:44:49:75:53:
d7:c6:f9:ea:e9:34:03:bf:9a:db:8e:4f:50:94:20:c4:bd:19:
d7:e3:ba:e4:92:87:f3:6f:b0:71:43:4c:4a:1a:88:a9:0d:ff:
97:db:44:64:6e:3f:a4:48:e8:67:a1:16:b1:74:05:41:e9:1b:
09:a3:b2:34:4f:8e:74:71:a4:c7:91:e8:58:9b:65:6c:d8:58:
3e:4e:1c:60:bd:da:b7:a0:a6:ee:eb:84:f5:03:7d:0f:87:41:
62:58:01:b6:c9:4a:44:1b:e3:80:bb:a7:2c:26:0c:f7:79:4f:
30:32:85:5d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEk0DhFYjNu/bN91kYRAgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ4YTY0OTAzY2ZhMjE3Mzc5NzQ5ZjE4YjdmZGNlYTFkYWI2ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CZ8rR2VeRLhL1iK7uLiUUbEPOq3
vSM4xdfhlTDjpjH5nVhHaBDv1HXqwXRZms4dPK5Wu3gPAR3M5V+Tc7YD475bwBpy
AhH88fpc57l6jogt+IKDe+0EW7F3ajxNdYvx7QE/i+uN7Le4ok9qzPKoZpEkYsMw
Xps1A67OZXSsijtpJLSzwo3dBahS28zEAeURRgBQlGkXp5lBETBt0KKmRnHScanP
lj+obimQxKePBN0KfK7UMNX+b2quejq2Kxy9E/EPRvAiHqPaHXKPNwmBD7Orn+Je
OsJiQDdmhGGhWvAELG7GcrXtS47TweFYjLQBh0siWKNcENM9c/jFNBdyKQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDDYpkkDz6IXN5dJ8Yt/3Oodq220MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I3YTI0
OS0xNTUyLTRmMTAtYjAwOC0xZjY2ZmFhYjRhYjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjdhMjQ5
LTE1NTItNGYxMC1iMDA4LTFmNjZmYWFiNGFiNS8xL01OaW1TUVBQb2hjM2wwbnhp
M19jNmgycmJiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0EAgACMAcDBQAqAkRgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMVMDANBgkqhkiG9w0BAQsFAAOCAQEAcCWqL7E+r2RZ
8N9LrBLliVA9UsjTFZBmxHqDqL2uS0HMiryja4pKOTGbQrhe0ob/WiuIrdD2mEcM
46BELwXYGQXmW0GeHVd/cvb4OpgtYhK8iTSsHl3ayaCBk/NJdPSGRYwcpCcr5qD4
fd/IV/Z+C5V9hjAOGK5xzuYRrYIaeinfcr5CmN9gYVU3hTtESXVT18b56uk0A7+a
245PUJQgxL0Z1+O65JKH82+wcUNMShqIqQ3/l9tEZG4/pEjoZ6EWsXQFQekbCaOy
NE+OdHGkx5HoWJtlbNhYPk4cYL3at6Cm7uuE9QN9D4dBYlgBtslKRBvjgLunLCYM
93lPMDKFXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:48:58 2024 by rpki-client on console-ams.rpki-client.org