Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
File: MQg6vX-XmWMam72oo09EIwH8bm8.cer (raw, json)
Hash identifier: L7NbfKkR9D8zMknMNTjbHMe+RBU96A4CwY/y5oyH4sw=
Subject key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF134536168ED39CFF4EC2B92456F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.244.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f1:34:53:61:68:ed:39:cf:f4:ec:2b:92:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:6e:72:6c:9f:af:e0:98:42:db:35:88:fb:
66:56:6b:c3:3a:38:8c:74:75:ce:92:1a:df:95:9f:
2f:29:40:f1:f4:92:4c:3c:e9:a8:be:fe:61:e2:22:
39:57:b9:e8:dc:0b:41:e5:d5:32:7d:4e:8c:f5:5b:
ce:19:c6:a6:5b:09:85:43:50:3c:4a:dd:a4:e5:da:
05:1a:09:4a:80:ca:9f:f3:fd:c1:8b:c4:c8:68:7b:
ce:e3:6a:d4:50:8c:28:56:98:6e:20:7d:36:c6:49:
40:3c:5b:72:f2:45:d3:ce:ee:d8:a4:70:6b:79:00:
5b:e7:65:75:b4:8d:14:83:80:13:7f:f3:33:a1:7f:
fe:bd:b2:88:bc:82:b0:93:91:b9:71:a5:2f:81:88:
a2:62:26:53:fc:f2:f2:77:e6:2b:47:6b:a7:db:58:
dd:66:91:91:6c:d1:4d:9a:ec:4a:52:dd:58:2c:c9:
a3:b8:5f:19:c2:5a:f3:4c:97:1a:ce:45:27:43:18:
f4:bf:7b:98:3f:8d:10:59:10:20:35:f3:c5:85:80:
d8:1b:e2:52:bc:f6:ea:4b:b9:11:2b:5c:d3:30:10:
2d:4f:79:12:d9:1c:1f:3a:2a:f7:3c:99:ed:6b:c0:
f9:3f:1b:a1:1c:0e:a7:99:e2:d6:b3:d7:71:22:aa:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0c:5e:1a:c8:7b:c1:a4:da:05:57:b5:1e:a9:0b:80:16:d2:
c5:b3:d9:28:81:cc:10:e5:4f:1b:31:cb:43:7f:3d:1d:b2:66:
0f:25:1d:25:f9:1b:b7:80:16:35:df:12:27:f2:3e:1a:4a:45:
7f:45:e0:bc:7f:0d:2e:36:ee:77:b6:46:71:52:8e:96:16:c4:
1b:9c:45:6d:5a:37:26:35:4f:21:82:19:80:3e:07:98:4d:38:
19:9c:c2:5f:09:36:24:6c:79:86:7d:de:7d:ba:f2:5f:1a:a0:
2f:7b:8b:57:c1:dc:75:5b:af:7b:4c:0f:5f:11:27:29:45:3e:
b7:5f:22:6a:c0:1f:b4:46:c5:6f:46:65:c3:d4:f7:fc:08:a8:
13:48:cc:9e:f0:01:ef:f7:75:aa:55:40:af:33:4c:70:c0:56:
09:77:f3:51:fc:e9:e8:b5:b3:46:d4:06:b5:ee:c0:7d:6c:ee:
29:29:76:ae:5b:2a:94:73:37:0a:38:4f:b2:96:b4:87:84:e1:
eb:7d:b9:26:15:8a:e4:bd:3e:15:c6:78:cd:6f:24:c5:18:a6:
d5:a2:42:e0:42:b1:fa:18:d9:3a:75:a2:cd:80:8a:43:fb:af:
5d:64:8b:57:25:fb:59:59:60:2f:78:f7:8f:10:50:8e:07:8b:
43:ba:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:10:26 2024 by rpki-client on console-fra.rpki-client.org