Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.cer (raw, json)
Hash identifier: xOUL6EuLyjjgeeebznbrn61acJgYbir6thhY0NotYE0=
Subject key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7273754570ACFE2F4E7874D3F067A09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211658
IP: 185.167.219.0/24
IP: 193.239.178.0/24
IP: 2a0d:c700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:37:54:57:0a:cf:e2:f4:e7:87:4d:3f:06:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313dcd18712266504586976733ca1f92f6261f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:88:8b:92:92:ee:92:e5:ba:66:9b:76:8e:
1d:b5:6e:bb:48:2b:79:85:ef:02:9f:d1:d1:fd:88:
d8:5c:51:a9:b2:da:98:1b:2c:cf:1a:f7:7b:d4:70:
e7:bb:70:f9:e9:24:3b:57:75:e4:65:d2:bb:0c:cb:
eb:18:7d:08:6e:f6:38:6b:33:73:4d:03:a4:28:ac:
51:e8:9b:70:97:1e:fa:26:fa:3a:14:7b:ce:f6:d5:
df:92:7b:58:4f:d5:ba:2d:a4:7a:9c:ef:1c:11:2d:
2c:8d:6d:4c:7a:8d:09:35:ff:19:59:b5:77:3b:8b:
c0:07:ca:e8:a3:72:7a:f3:4b:e0:e6:53:0c:2a:eb:
5e:bb:a2:f8:1e:65:8e:7e:f8:b2:5f:fd:08:62:7b:
62:6d:4b:fc:16:3a:79:3e:91:2d:63:d8:5e:82:27:
99:8b:53:e1:83:f2:4f:4c:aa:6d:64:92:aa:4c:5a:
b5:86:c7:f7:af:e7:2b:0e:cb:15:0b:62:1f:79:3d:
d8:ce:b8:32:bd:67:90:97:d1:8a:f8:53:74:97:c2:
62:ae:6a:5f:3c:f8:eb:03:a5:a4:c0:82:89:c1:2a:
43:0c:b5:e3:13:03:04:dc:eb:1a:77:f9:33:52:5b:
6c:99:c2:92:57:f5:85:9e:af:1c:88:69:24:a5:cc:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.219.0/24
193.239.178.0/24
IPv6:
2a0d:c700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211658
Signature Algorithm: sha256WithRSAEncryption
83:d7:82:03:fb:e4:81:4f:7e:27:49:11:57:6a:8e:06:87:29:
e8:20:9c:b9:85:f4:ee:81:39:6e:fc:d7:e4:8d:f1:9e:fe:64:
0d:90:02:e5:18:4c:44:f1:5c:46:5f:fa:0d:1a:d3:b7:09:97:
cc:8d:39:4f:93:7a:69:c5:6c:d7:f2:a1:72:91:6e:1f:e8:a1:
f5:f8:19:66:3a:b2:fc:5b:46:fd:c8:c3:29:8b:ce:aa:d0:a5:
72:21:98:32:50:88:47:b3:6f:f8:7c:96:91:84:b2:15:f2:35:
b5:ca:ad:60:be:b5:93:e3:84:84:cc:d6:d7:ad:76:d4:78:50:
38:cf:64:48:14:59:76:e4:65:9e:b7:d3:33:f5:7a:46:ef:00:
24:f4:76:82:8d:6f:53:f6:f8:3b:21:2f:22:89:cc:a7:00:27:
50:20:32:cf:20:35:ad:b7:eb:36:ba:a9:fd:ac:88:0d:86:d9:
2a:5b:e9:70:58:30:a1:d6:e7:4f:ae:fd:5b:58:bd:c1:b6:b8:
c9:52:6a:ee:68:e6:1d:90:16:e2:57:63:21:ec:79:3c:63:6f:
16:36:e9:26:10:6d:cc:05:8d:cb:eb:1c:55:04:c0:01:94:9f:
e0:dd:51:87:47:d5:3d:dc:05:a5:6c:65:23:41:1b:69:16:49:
63:d0:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:12:33 2024 by rpki-client on console-fra.rpki-client.org