Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer (raw, json)
Hash identifier: GndMejKdgShmr6C6ucA2ufnndyfopL+CERTg4mBKoSQ=
Subject key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD2AC7DA6BC5E74E97292228F5E257
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197368
IP: 91.220.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:2a:c7:da:6b:c5:e7:4e:97:29:22:28:f5:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:e2:83:32:8f:76:49:0a:a2:68:db:43:d6:
3c:a5:59:5a:60:88:10:9f:79:f3:df:88:06:7a:a6:
2a:01:51:3a:31:16:11:a2:ee:51:20:e7:35:b9:23:
04:f0:7b:96:0c:c1:d7:d5:b3:c9:86:00:f5:59:c9:
39:33:ad:84:d0:02:41:09:c2:32:5c:fd:e9:08:29:
cc:d0:52:27:f7:5d:6d:d7:6f:0b:e5:75:13:d0:70:
e3:e3:dd:ef:ee:3d:b7:1f:4e:13:c0:1a:20:ef:86:
19:6b:a6:8e:8e:55:79:64:b8:df:e2:f5:ff:d5:f1:
90:ce:46:7d:30:3d:a8:3e:28:ae:40:16:00:b0:b4:
76:3a:f1:e2:ea:91:b0:39:3f:10:33:72:ff:89:1e:
89:09:66:60:5e:8d:df:e1:31:b0:2c:36:67:4e:bf:
95:b1:bd:e0:ad:10:69:af:a6:c3:c5:ba:f9:df:aa:
07:ee:00:0a:f1:39:0a:18:dd:a2:e9:09:73:90:d7:
52:85:62:90:d4:68:6c:73:e9:24:79:82:e9:77:c5:
30:2b:35:44:ad:b6:14:c4:09:b7:71:53:4a:62:89:
d8:e7:33:07:80:f2:80:76:b6:04:39:84:2e:9d:f9:
ca:45:bb:33:9d:a2:ab:8a:61:21:3b:e7:44:14:6e:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.44.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197368
Signature Algorithm: sha256WithRSAEncryption
36:8a:3c:a0:30:c5:ec:56:b0:93:fe:d5:3b:b3:44:37:d6:31:
0d:f3:d4:48:bb:95:c2:68:36:af:99:75:1d:77:3b:b9:fe:4c:
f1:ef:da:83:88:8b:01:86:78:a5:02:0d:76:46:37:95:29:d7:
10:60:dd:aa:de:44:39:aa:a6:e8:bd:31:bf:61:dd:82:1f:b4:
73:1a:74:82:c1:f9:52:28:0e:eb:bc:8e:44:d8:46:8e:7f:81:
fd:95:15:45:f1:a5:0d:c3:45:34:a3:d5:38:f5:31:10:ff:4b:
2a:87:43:f4:c5:b1:7a:3e:b1:b1:96:4b:ca:21:3f:a3:16:dc:
f0:ec:3f:d4:cf:82:2c:ee:09:8f:a4:74:ec:6f:e2:f8:32:ac:
4b:70:f9:60:3e:14:5c:9d:7c:f9:fa:2c:3e:a1:df:0f:ab:08:
5a:fe:64:a9:4a:60:ae:51:59:77:b2:50:16:5b:ba:55:0e:f8:
0b:ad:22:17:d5:4c:f5:09:59:f8:1a:70:84:df:89:5e:d1:69:
75:25:37:dc:f9:e8:9c:71:f4:28:9f:57:78:31:2d:0a:84:f5:
5f:9a:68:d0:99:05:88:eb:da:74:32:d6:5a:7c:05:b7:74:b3:
db:58:fb:2b:21:c9:b3:97:c2:36:e0:6b:1a:7b:c8:bc:09:aa:
be:f2:be:2c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzF3SrH2mvF506XKSIo9eJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBlMmU5ZmI3MDY2OGM3OTZhZGNlODc3YjIxZTA5YThhMWFkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0figzKPdkkKomjbQ9Y8pVlaYIgQ
n3nz34gGeqYqAVE6MRYRou5RIOc1uSME8HuWDMHX1bPJhgD1Wck5M62E0AJBCcIy
XP3pCCnM0FIn911t128L5XUT0HDj493v7j23H04TwBog74YZa6aOjlV5ZLjf4vX/
1fGQzkZ9MD2oPiiuQBYAsLR2OvHi6pGwOT8QM3L/iR6JCWZgXo3f4TGwLDZnTr+V
sb3grRBpr6bDxbr536oH7gAK8TkKGN2i6QlzkNdShWKQ1Ghsc+kkeYLpd8UwKzVE
rbYUxAm3cVNKYonY5zMHgPKAdrYEOYQunfnKRbsznaKrimEhO+dEFG4AdQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDEOLp+3BmjHlq3Oh3sh4JqKGtApMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2Q5ZDgy
ZC0xY2E0LTQ4MjQtYTkyYy1jYTU1ZWZjNzc1MmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZDlkODJk
LTFjYTQtNDgyNC1hOTJjLWNhNTVlZmM3NzUyZC8xL01RNHVuN2NHYU1lV3JjNkhl
eUhnbW9vYTBDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9wsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMC+DANBgkqhkiG9w0BAQsFAAOCAQEANoo8oDDF7Fawk/7VO7NEN9YxDfPUSLuV
wmg2r5l1HXc7uf5M8e/ag4iLAYZ4pQINdkY3lSnXEGDdqt5EOaqm6L0xv2Hdgh+0
cxp0gsH5UigO67yORNhGjn+B/ZUVRfGlDcNFNKPVOPUxEP9LKodD9MWxej6xsZZL
yiE/oxbc8Ow/1M+CLO4Jj6R07G/i+DKsS3D5YD4UXJ18+fosPqHfD6sIWv5kqUpg
rlFZd7JQFlu6VQ74C60iF9VM9QlZ+BpwhN+JXtFpdSU33PnonHH0KJ9XeDEtCoT1
X5po0JkFiOvadDLWWnwFt3Sz21j7KyHJs5fCNuBrGnvIvAmqvvK+LA==
-----END CERTIFICATE-----
Generated at Fri May 3 06:57:10 2024 by rpki-client on console-ams.rpki-client.org