Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
File: MVGMe1S0QScIP2JtPhUY9EVM4FU.cer (raw, json)
Hash identifier: IfsaYa7g1B5bQfUNcL/hbd+3c7PkP3y1xSJr+lOKcKk=
Subject key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192DD5BF88BC837B90437E98CAD4A73AA2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Oct 2024 12:17:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201473
IP: 185.218.206.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:5b:f8:8b:c8:37:b9:04:37:e9:8c:ad:4a:73:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 12:17:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31518c7b54b44127083f626d3e1518f4454ce055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:4a:1d:e1:52:1e:a8:c4:dc:eb:32:b7:ec:
83:c9:52:5b:96:6e:c9:93:11:50:79:35:31:eb:9c:
bf:5c:69:8e:6e:74:da:55:6f:71:ff:6c:04:81:15:
8c:b7:79:04:f9:57:d9:92:b2:ad:4f:b3:8d:2f:83:
c6:a8:d8:00:65:7d:2a:cd:19:a0:e8:ef:b5:e2:ae:
14:bd:91:28:ef:24:fe:03:08:8c:89:26:34:98:a7:
50:8f:8e:d9:84:70:7d:f7:16:07:87:e9:87:e3:b5:
b8:ea:ec:73:5d:f5:23:6e:ce:43:36:8b:8c:cd:f6:
4a:3b:06:dc:85:67:08:6a:e4:2e:22:80:dd:9f:6e:
bd:2f:de:b2:4d:02:54:ec:34:72:b6:14:72:d2:8d:
6c:9f:e5:07:45:9c:58:a9:5e:00:58:90:26:8c:e7:
05:2d:89:17:1b:34:d5:da:61:dd:01:ba:4d:1d:0b:
64:83:71:fb:90:a9:f5:47:69:da:fa:56:4c:60:66:
78:f4:3d:42:e0:93:8b:eb:7a:94:7f:aa:21:2f:54:
49:98:bb:c6:d3:b1:c2:f1:d1:18:0b:79:a2:52:31:
55:90:8b:e3:59:d7:40:d4:80:3d:33:6b:74:c6:8c:
ea:97:c6:6d:af:cf:2f:3b:33:76:fc:61:dd:51:02:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.206.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201473
Signature Algorithm: sha256WithRSAEncryption
9e:67:85:6d:3a:ba:0f:4b:fd:a6:76:4a:27:16:62:0d:ec:94:
f4:a1:25:3a:85:19:03:f7:5c:2c:99:df:0b:00:cf:f7:95:8e:
39:a7:30:aa:19:52:3b:09:20:b4:c6:ed:bd:25:4d:99:ff:f4:
c8:8c:5b:ad:f5:bd:79:42:88:23:3f:89:b8:04:5c:20:da:88:
34:7f:5c:a1:14:7a:22:eb:da:f9:cc:0e:d4:c1:d7:9f:ac:03:
b7:43:4d:48:62:d5:d1:34:ed:80:96:ec:3a:8d:b7:c2:53:48:
69:23:44:79:32:98:84:9c:cc:d0:1f:2c:b4:0f:5e:17:1c:bb:
a2:2b:df:26:a2:d8:00:cd:02:b4:a0:89:ef:4b:3d:d6:17:d3:
dd:9e:35:53:97:53:a7:6c:c0:03:08:52:eb:7b:1f:93:07:84:
e4:dd:db:67:05:a5:4e:a5:c8:b5:a0:d4:21:01:90:e7:2e:7b:
c9:81:c0:72:89:c5:3d:b6:36:58:d9:6c:69:73:bd:3b:94:9d:
91:d2:c8:a1:b0:38:e6:0c:aa:91:68:80:29:e1:8a:5e:fd:30:
7f:15:e6:ec:53:68:b0:7e:f3:c7:37:a0:9f:70:2a:9b:10:f5:
85:0f:ac:37:f6:62:89:34:4c:7c:f2:33:c8:4b:10:02:85:91:
e9:37:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:48:59 2024 by rpki-client on console-ams.rpki-client.org