Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
File: MQsFJRN4mUz6gIjSO27u1Onmqwg.cer (raw, json)
Hash identifier: GNj/CAyQ+4ayipzi9h0dVsh1JjgtxD/SY+GNe9zbnLw=
Subject key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F296EB28B090D67F5C94637DE7208214A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Apr 2024 10:37:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 88.151.117.0/24
IP: 185.234.216.0/24
IP: 193.9.20.0/24
IP: 2a0b:7a80::/29
IP: 2a0e:4580::/29
IP: 2a11:1380::/29
IP: 2a11:15c0::/29
IP: 2a11:34c0::/29
IP: 2a11:9880::/29
IP: 2a12:2740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:6e:b2:8b:09:0d:67:f5:c9:46:37:de:72:08:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 10:37:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:23:f9:9a:8b:25:7a:69:ac:52:55:a9:04:
e5:74:18:bc:56:c7:aa:9a:1f:b0:5a:fc:3a:0c:9d:
83:0f:6e:35:a4:c5:e4:41:b0:b8:ec:0b:4b:6c:ea:
15:7e:51:17:02:02:aa:4b:a4:fc:70:23:8e:5a:42:
cd:b3:22:4f:7e:dc:b0:5c:c5:d9:6a:9e:fb:dc:bc:
63:22:54:4e:6f:93:1f:bb:af:cb:ce:74:89:1b:16:
71:dd:26:2e:69:f6:59:9d:99:ae:7c:f1:ff:a8:42:
6b:33:6a:70:eb:a8:bf:d0:1a:67:52:e8:90:05:a9:
a0:68:62:bf:fb:2e:2b:89:9b:b6:43:a1:69:b7:a7:
e7:13:d2:42:5a:4b:58:10:ce:b4:34:d7:e4:a3:75:
65:34:d3:76:4b:40:e5:c0:b9:78:41:e0:d6:32:ec:
6a:e3:9b:7e:66:04:5f:75:20:c9:f8:d2:54:2d:6f:
47:b4:38:04:8c:d7:4a:c2:53:20:32:77:af:3d:e2:
46:da:01:5a:15:3c:3c:36:e7:a4:a1:35:30:be:0c:
8f:7c:28:16:26:e4:a0:c3:16:43:6e:74:21:74:ed:
64:0c:06:6d:07:59:3b:32:12:c9:40:c3:d6:46:54:
7a:33:6f:bf:fa:25:d9:bb:6a:71:1d:78:f7:ba:fb:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.117.0/24
185.234.216.0/24
193.9.20.0/24
IPv6:
2a0b:7a80::/29
2a0e:4580::/29
2a11:1380::/29
2a11:15c0::/29
2a11:34c0::/29
2a11:9880::/29
2a12:2740::/29
Signature Algorithm: sha256WithRSAEncryption
8c:30:85:df:af:13:80:ac:37:f5:67:8b:a9:3d:1e:dc:ee:f8:
8a:9d:8d:a0:d9:08:c2:62:bf:c4:3d:ef:19:c7:08:27:81:ed:
e1:59:73:31:dc:77:36:ad:93:e3:ad:14:81:8e:4f:6a:60:7c:
08:07:b6:55:28:9f:4f:49:25:ea:a5:f8:89:7d:06:92:07:71:
c4:ea:ac:ec:8b:38:a9:86:3a:f1:47:5c:82:68:28:9b:78:21:
c3:23:c0:91:88:21:b8:c3:c9:1f:39:c9:27:e0:a4:2a:97:1f:
b0:0c:11:41:6a:d2:76:b8:ae:28:b7:6f:40:6d:9f:75:eb:2e:
69:5d:4b:07:fd:47:00:13:71:83:12:be:94:80:f1:2b:b0:c1:
e7:d4:27:88:0e:bd:fa:22:3f:01:87:fe:b5:1f:72:65:bf:c4:
d4:fe:4e:4a:c7:fc:24:80:db:e0:27:d1:1b:3d:d8:60:9a:9b:
f1:a9:65:32:b8:b1:40:0f:ec:e7:44:0b:19:83:c0:9c:15:a5:
13:bc:b8:17:d9:f7:a7:75:54:9e:48:5f:ca:db:09:68:fa:87:
88:41:45:2d:1e:e1:5a:3f:c9:89:21:a0:c9:7b:c5:90:3d:c0:
e6:42:7d:00:b7:59:45:32:45:00:d0:cb:9c:b9:71:d2:5f:15:
ff:b6:f6:bb
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAY8pbrKLCQ1n9clGN95yCCFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDI5MTAzNzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBiMDUyNTEzNzg5OTRjZmE4MDg4ZDIzYjZlZWVkNGU5ZTZhYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYj+ZqLJXpprFJVqQTldBi8Vseq
mh+wWvw6DJ2DD241pMXkQbC47AtLbOoVflEXAgKqS6T8cCOOWkLNsyJPftywXMXZ
ap773LxjIlROb5Mfu6/LznSJGxZx3SYuafZZnZmufPH/qEJrM2pw66i/0BpnUuiQ
BamgaGK/+y4riZu2Q6Fpt6fnE9JCWktYEM60NNfko3VlNNN2S0DlwLl4QeDWMuxq
45t+ZgRfdSDJ+NJULW9HtDgEjNdKwlMgMnevPeJG2gFaFTw8NuekoTUwvgyPfCgW
JuSgwxZDbnQhdO1kDAZtB1k7MhLJQMPWRlR6M2+/+iXZu2pxHXj3uvs5kwIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFDELBSUTeJlM+oCI0jtu7tTp5qsIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzc3MTQ4
Ni1iZWUzLTQyNGEtYjM0MS03Y2ZkZjJkZjY2MzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzcxNDg2
LWJlZTMtNDI0YS1iMzQxLTdjZmRmMmRmNjYzMi8xL01Rc0ZKUk40bVV6NmdJalNP
Mjd1MU9ubXF3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF
BwEHAQH/BFUwUzAYBAIAATASAwQAWJd1AwQAuerYAwQAwQkUMDcEAgACMDEDBQMq
C3qAAwUDKg5FgAMFAyoRE4ADBQMqERXAAwUDKhE0wAMFAyoRmIADBQMqEidAMA0G
CSqGSIb3DQEBCwUAA4IBAQCMMIXfrxOArDf1Z4upPR7c7viKnY2g2QjCYr/EPe8Z
xwgnge3hWXMx3Hc2rZPjrRSBjk9qYHwIB7ZVKJ9PSSXqpfiJfQaSB3HE6qzsizip
hjrxR1yCaCibeCHDI8CRiCG4w8kfOckn4KQqlx+wDBFBatJ2uK4ot29AbZ916y5p
XUsH/UcAE3GDEr6UgPErsMHn1CeIDr36Ij8Bh/61H3Jlv8TU/k5Kx/wkgNvgJ9Eb
PdhgmpvxqWUyuLFAD+znRAsZg8CcFaUTvLgX2fendVSeSF/K2wlo+oeIQUUtHuFa
P8mJIaDJe8WQPcDmQn0At1lFMkUA0MucuXHSXxX/tva7
-----END CERTIFICATE-----
Generated at Fri May 3 07:30:05 2024 by rpki-client on console-fra.rpki-client.org