Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer (raw, json)
Hash identifier: 24lI7syhB6PGDYnyb26zxeY0e9pAxqXzREu3XQP28G4=
Subject key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EB689310B76E3AF927610FF18C90B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39926
IP: 195.95.142.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b6:89:31:0b:76:e3:af:92:76:10:ff:18:c9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:9a:10:ae:48:55:db:29:91:4b:87:52:79:
ad:a6:91:bc:81:92:bb:ad:73:cc:c9:b6:57:20:5e:
73:b5:76:60:3c:76:7d:b7:f9:98:f5:9c:b1:04:ea:
b5:35:86:e1:84:50:d1:a3:2e:db:57:b9:e9:62:2b:
1a:90:f9:1f:93:fd:f3:ba:a2:14:92:f9:4e:cd:0c:
3c:7c:68:97:fb:fa:51:eb:11:1a:41:f7:29:65:fb:
cb:fa:27:71:c4:03:ce:c1:ac:bf:ed:58:ed:3d:95:
23:f7:62:b6:2c:45:c6:89:c3:12:1a:97:a8:a4:aa:
42:6b:74:58:b7:cd:77:27:4b:a3:6e:a9:93:ce:bd:
89:76:1e:6c:9d:c2:10:31:1d:da:81:8d:4a:e2:31:
6f:c4:89:4d:0f:52:41:45:8e:1e:30:d1:99:93:81:
b7:91:e6:65:4d:bf:18:0a:db:a6:91:47:64:0d:c9:
13:f0:f1:c8:28:10:51:47:2c:80:62:ec:99:a4:aa:
10:f1:43:3a:46:3c:7e:0e:c8:7d:94:d1:3b:43:c8:
54:10:1c:e0:1d:74:8e:7b:c4:99:35:e4:06:bd:17:
ab:34:b5:1d:9a:7d:37:37:5e:cc:b4:6c:59:24:75:
8e:0e:89:16:54:6a:7c:7c:03:e6:fa:30:18:05:d6:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39926
Signature Algorithm: sha256WithRSAEncryption
44:f7:a8:d6:5c:f5:e1:cd:7e:28:49:1a:3a:fc:30:4f:3a:1b:
41:54:0c:13:0c:1a:3d:f5:ac:d1:36:d7:0b:6c:73:60:b3:43:
23:26:fb:5c:96:d7:e4:ca:9d:80:d3:99:45:bc:76:2a:5e:2b:
c5:4e:b3:0b:04:ac:72:cf:11:4a:ee:b1:f1:3b:1e:90:03:88:
c9:59:d3:f7:20:49:d2:32:52:ed:fa:5c:cd:81:06:de:9e:1a:
54:e4:8d:7e:1c:c6:2d:81:52:52:86:1d:4d:9e:15:bd:5f:1f:
3f:91:81:38:ab:ed:7a:d4:d4:da:24:43:62:50:84:9b:b1:a1:
11:ae:93:f3:b5:03:4e:c4:02:6f:4e:c1:3e:53:d1:39:8b:d9:
db:07:9e:3f:1a:73:1f:fb:71:9c:f8:aa:c3:87:44:e3:e0:3c:
71:08:f2:c0:f2:20:92:57:85:87:4a:e3:ea:66:4c:f5:d7:4b:
45:3b:3a:70:08:a7:c3:b9:f6:0a:c4:a2:63:42:ea:c3:de:06:
ce:5b:fb:3a:d4:01:da:bc:a1:f1:77:5e:f2:a9:0e:dc:8b:ec:
d6:7d:3e:41:78:d5:77:0b:a2:f2:b5:32:a8:68:f2:ce:d6:48:
7e:8f:a1:fa:73:cc:9d:ab:6a:f3:e2:60:9b:93:6b:16:de:93:
0b:99:57:d3
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzFbraJMQt246+SdhD/GMkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTNjZGJjNGI0ZGU1NDk1ZWU2MTMxN2QyZTczN2MyYzNmN2Y4M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW2aEK5IVdspkUuHUnmtppG8gZK7
rXPMybZXIF5ztXZgPHZ9t/mY9ZyxBOq1NYbhhFDRoy7bV7npYisakPkfk/3zuqIU
kvlOzQw8fGiX+/pR6xEaQfcpZfvL+idxxAPOway/7VjtPZUj92K2LEXGicMSGpeo
pKpCa3RYt813J0ujbqmTzr2Jdh5sncIQMR3agY1K4jFvxIlND1JBRY4eMNGZk4G3
keZlTb8YCtumkUdkDckT8PHIKBBRRyyAYuyZpKoQ8UM6Rjx+Dsh9lNE7Q8hUEBzg
HXSOe8SZNeQGvRerNLUdmn03N17MtGxZJHWODokWVGp8fAPm+jAYBdZktQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDE828S03lSV7mExfS5zfCw/f4O6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzlmZDU3
Yy05MGVmLTQ0YjAtOTNlNC1mZTVhZWQ1OWE3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvOWZkNTdj
LTkwZWYtNDRiMC05M2U0LWZlNWFlZDU5YTdkOS8xL01UemJ4TFRlVkpYdVlURjlM
bk44TEQ5X2c3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw1+OMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCb9jANBgkqhkiG9w0BAQsFAAOCAQEARPeo1lz14c1+KEkaOvwwTzobQVQMEwwa
PfWs0TbXC2xzYLNDIyb7XJbX5MqdgNOZRbx2Kl4rxU6zCwSscs8RSu6x8TsekAOI
yVnT9yBJ0jJS7fpczYEG3p4aVOSNfhzGLYFSUoYdTZ4VvV8fP5GBOKvtetTU2iRD
YlCEm7GhEa6T87UDTsQCb07BPlPROYvZ2weePxpzH/txnPiqw4dE4+A8cQjywPIg
kleFh0rj6mZM9ddLRTs6cAinw7n2CsSiY0Lqw94Gzlv7OtQB2ryh8Xde8qkO3Ivs
1n0+QXjVdwui8rUyqGjyztZIfo+h+nPMnatq8+Jgm5NrFt6TC5lX0w==
-----END CERTIFICATE-----
Generated at Fri May 3 10:10:28 2024 by rpki-client on console-fra.rpki-client.org