Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
File: MRRFNToII-2u8So6M1b6gJjhXqw.cer (raw, json)
Hash identifier: Z1wkUGpb7m6UILgBX4U5CS1BBQiMiIF5V0FgdjvwvXw=
Subject key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AEFB0D0C79196A88D9A95083835F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205037
IP: 161.51.255.0/24
IP: 193.23.163.0/24
IP: 2001:67c:2c6c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:ef:b0:d0:c7:91:96:a8:8d:9a:95:08:38:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=311445353a0823edaef12a3a3356fa8098e15eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:6c:3c:60:38:e7:80:b8:5a:19:ea:f4:7e:
af:2a:8a:60:e8:80:8a:b4:91:e2:62:09:80:56:d4:
59:c1:1d:3e:88:b8:ac:84:7d:ed:8c:aa:15:48:ab:
ae:03:11:95:40:89:7e:23:65:d9:86:bd:f7:30:fd:
d1:77:2a:d6:de:c0:87:3a:26:2e:29:97:c0:9f:b6:
1a:c0:f9:94:77:2f:90:92:ae:27:22:ba:b3:05:e7:
d5:91:af:25:94:4f:6d:c7:46:d4:a0:a9:2a:f0:76:
25:17:87:20:67:ce:58:cd:da:33:96:5d:f9:f4:19:
16:5f:31:37:68:08:66:85:d6:c0:07:64:dc:55:38:
44:1a:9b:18:bd:4e:c4:47:ba:d8:07:79:3b:f2:31:
8b:27:fa:bd:e9:0c:86:3d:dd:bf:cf:a9:13:dc:c2:
5e:1f:88:38:c6:d1:5a:f2:1d:08:c4:a1:bf:b8:7f:
b6:fe:45:41:3e:d4:87:1b:53:c4:2a:ce:b3:4f:04:
81:ca:cd:37:f9:aa:d2:f0:e8:e4:c9:3e:2b:aa:48:
55:c7:90:e8:c8:ec:c1:a9:7c:b9:55:16:a7:f3:05:
b4:36:ed:ce:f5:3b:36:98:b6:38:31:f5:5a:8c:57:
18:73:c3:e4:24:08:17:f8:86:b9:49:20:62:2d:38:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.51.255.0/24
193.23.163.0/24
IPv6:
2001:67c:2c6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205037
Signature Algorithm: sha256WithRSAEncryption
85:0c:bf:d2:e6:03:c9:0d:43:89:87:0d:f4:43:7a:2d:82:31:
d6:84:38:c1:14:0b:29:14:87:10:7b:f1:59:f8:a1:33:01:c1:
de:a8:de:19:b1:95:37:7c:05:a3:70:16:a4:ff:9b:8d:77:00:
88:54:bf:73:a4:62:78:6a:15:67:d0:9b:ac:90:13:a6:c3:3d:
a6:02:bf:1a:56:72:78:60:67:73:5f:5e:ce:83:f4:28:c2:27:
99:af:85:ed:eb:39:b7:45:cc:86:83:76:01:6f:2b:c1:7e:20:
b5:1c:de:57:a0:31:d5:b1:26:77:81:17:a8:cf:3c:b6:c5:83:
33:ea:4e:57:81:79:6f:29:50:85:3e:55:73:40:ec:29:73:b9:
3d:d0:bf:7e:1d:8d:7f:b2:8b:8e:5a:27:3f:4f:0d:59:47:3c:
c0:99:bd:d3:6a:07:e4:5b:10:af:42:ee:55:24:79:9b:6b:bc:
13:ff:4c:8b:ed:d3:eb:23:12:ed:be:e7:23:29:60:2d:69:c1:
3b:9a:b1:55:32:6d:68:6b:74:fd:5d:cc:bd:a2:15:31:96:36:
15:bb:d0:85:71:85:cc:84:63:3c:a4:02:ff:b8:e3:63:99:3a:
a2:e0:8d:c0:be:fa:8b:45:6d:e3:f5:a6:d3:f0:be:9f:9b:81:
13:4e:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:54:27 2024 by rpki-client on console-fra.rpki-client.org