Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
File: MQsFJRN4mUz6gIjSO27u1Onmqwg.cer (raw, json)
Hash identifier: 0xA0Gsm9fW0lIndzjs7tb4WbOtENeCLcGXSdYLMFOu4=
Subject key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01917A611E8E841097A8CBAEA485BAC46EBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Aug 2024 13:57:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.111.174.0/24
IP: 185.234.216.0/24
IP: 2a0b:7a80::/29
IP: 2a0e:4580::/29
IP: 2a11:1380::/29
IP: 2a11:15c0::/29
IP: 2a11:34c0::/29
IP: 2a11:9880::/29
IP: 2a12:2740::/29
IP: 2a12:3740::/29
IP: 2a12:46c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:61:1e:8e:84:10:97:a8:cb:ae:a4:85:ba:c4:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 13:57:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:23:f9:9a:8b:25:7a:69:ac:52:55:a9:04:
e5:74:18:bc:56:c7:aa:9a:1f:b0:5a:fc:3a:0c:9d:
83:0f:6e:35:a4:c5:e4:41:b0:b8:ec:0b:4b:6c:ea:
15:7e:51:17:02:02:aa:4b:a4:fc:70:23:8e:5a:42:
cd:b3:22:4f:7e:dc:b0:5c:c5:d9:6a:9e:fb:dc:bc:
63:22:54:4e:6f:93:1f:bb:af:cb:ce:74:89:1b:16:
71:dd:26:2e:69:f6:59:9d:99:ae:7c:f1:ff:a8:42:
6b:33:6a:70:eb:a8:bf:d0:1a:67:52:e8:90:05:a9:
a0:68:62:bf:fb:2e:2b:89:9b:b6:43:a1:69:b7:a7:
e7:13:d2:42:5a:4b:58:10:ce:b4:34:d7:e4:a3:75:
65:34:d3:76:4b:40:e5:c0:b9:78:41:e0:d6:32:ec:
6a:e3:9b:7e:66:04:5f:75:20:c9:f8:d2:54:2d:6f:
47:b4:38:04:8c:d7:4a:c2:53:20:32:77:af:3d:e2:
46:da:01:5a:15:3c:3c:36:e7:a4:a1:35:30:be:0c:
8f:7c:28:16:26:e4:a0:c3:16:43:6e:74:21:74:ed:
64:0c:06:6d:07:59:3b:32:12:c9:40:c3:d6:46:54:
7a:33:6f:bf:fa:25:d9:bb:6a:71:1d:78:f7:ba:fb:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.174.0/24
185.234.216.0/24
IPv6:
2a0b:7a80::/29
2a0e:4580::/29
2a11:1380::/29
2a11:15c0::/29
2a11:34c0::/29
2a11:9880::/29
2a12:2740::/29
2a12:3740::/29
2a12:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:b3:12:bc:c4:2f:ca:ed:08:9d:19:d4:c9:69:c0:8c:ec:e6:
26:49:8c:13:f5:ff:d3:c6:d5:42:18:47:08:de:3c:0f:81:02:
d4:74:05:83:77:e2:71:32:e9:1a:44:50:1d:2a:59:f8:c1:96:
3c:16:1a:a7:98:ff:66:96:e7:dc:1a:32:6f:14:6f:6d:4a:c4:
26:a5:21:cd:88:65:ae:71:d9:51:dc:dd:1a:a1:8b:6d:a2:bb:
ad:69:8d:09:bb:52:c7:f9:e5:e0:33:bc:6c:1c:a2:88:2b:52:
15:60:40:16:8f:cc:6f:e0:89:24:11:ba:53:6d:41:63:d0:ca:
b1:04:8b:66:20:f3:cb:06:f6:e7:90:df:4a:99:fc:eb:a2:66:
cc:76:b9:53:3e:32:8a:a4:da:94:ba:24:28:42:ac:14:af:5c:
21:7b:02:76:42:64:b9:b6:99:67:a8:ea:b3:10:8d:21:aa:ca:
fb:7d:df:ce:99:31:ee:10:61:14:a9:6a:ae:ef:eb:90:f3:c5:
a4:7e:0f:69:a3:ed:a7:32:34:0f:bc:a2:98:31:cc:7a:b1:98:
af:8b:17:a9:13:02:b3:4a:b4:69:46:5d:7e:fd:e3:62:7e:85:
c5:2e:dc:8d:41:ab:bc:5f:e2:ec:b3:54:a6:bc:c5:60:51:40:
e4:6d:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:50:51 2024 by rpki-client on console-ams.rpki-client.org