Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer (raw, json)
Hash identifier: 8CqFXm8s3J4vz30ueCQq9B44CLnXuLfgmoGCT5KocDs=
Subject key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D56201DA363C8F67DC40D9AE3A2F417AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jan 2024 16:49:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208252
IP: 45.150.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:20:1d:a3:63:c8:f6:7d:c4:0d:9a:e3:a2:f4:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 16:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31533690ab184f433f1760f3feaa184c443e70f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:aa:ef:19:5d:f5:32:bd:82:e8:d1:f7:c9:
12:f3:20:b9:18:7c:96:02:11:e0:87:59:d7:f0:73:
29:0c:3e:54:62:aa:0d:11:97:9c:73:97:97:f5:98:
c6:2a:b0:9f:40:c2:0d:1b:b0:e7:ff:2b:5c:03:e0:
28:ba:a9:ad:89:c4:4f:a1:d5:3a:7c:88:13:e3:9a:
6e:53:ef:98:8a:3d:70:2d:78:32:74:6f:1a:e9:b4:
1f:60:f2:b9:c0:38:dd:03:c0:8c:b0:eb:48:23:b8:
96:0c:67:cc:5b:be:9f:a6:46:8b:4b:8d:b6:fe:d4:
aa:77:ea:8c:c9:53:91:7f:79:f4:f6:e9:74:7c:2c:
52:eb:0b:0c:17:b2:9f:a9:e9:8f:20:83:e0:88:5e:
af:b8:29:fe:71:cc:7f:41:4c:ef:c4:30:4c:7d:17:
f5:42:ab:3a:c0:0f:26:a6:dc:83:ec:6a:da:36:37:
53:2a:6e:35:f0:2e:d5:9e:0d:55:5f:55:f3:b3:0b:
6b:6b:e1:78:18:6f:71:72:9a:98:f9:ff:28:8a:c2:
d1:c6:99:01:8f:5a:e7:27:43:e1:7b:57:f9:10:9d:
80:51:90:1c:71:a4:ce:ce:76:60:59:e3:5a:54:b4:
83:1a:fb:7b:78:1f:3f:45:29:75:d1:ac:78:d8:3c:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208252
Signature Algorithm: sha256WithRSAEncryption
23:a9:50:14:72:53:25:75:87:38:eb:73:e3:71:2c:3a:56:57:
a9:08:4d:05:60:a1:fe:1e:0d:da:28:33:ec:27:66:7f:91:09:
59:bc:61:77:98:05:6d:27:f3:99:51:95:0c:1c:b5:6a:17:19:
05:b6:09:a5:20:8e:9f:7b:3e:56:82:9f:a5:30:d4:47:7b:40:
af:eb:01:fd:b1:9e:dd:cc:bf:da:2d:cd:bb:1c:0f:df:c2:82:
09:6f:19:63:00:85:3c:87:da:e2:05:85:e5:9e:0f:c7:e8:e4:
4d:74:f9:d6:24:e5:f0:65:c8:5c:74:d1:85:e0:8f:f6:4c:24:
0a:29:c6:b3:70:61:4e:d2:8e:58:62:8e:80:9c:67:26:2a:0e:
33:8c:0d:51:81:1d:ab:0d:c8:cd:8b:bb:a1:eb:b4:1a:6a:c4:
bc:b9:c6:17:aa:54:31:5c:f3:1e:56:0d:14:a1:5d:d3:37:ad:
59:c9:40:57:cc:28:51:ae:49:7c:be:a0:d2:9a:c9:10:47:87:
ed:28:ea:51:20:6e:bf:dc:cf:ea:ef:32:cf:fd:3f:84:ae:60:
84:ca:64:1c:19:2f:8d:5e:d4:f6:8f:ef:d5:3e:ac:e3:bc:7e:
5a:9f:12:8e:70:71:8b:96:d2:fe:1a:ab:24:df:4c:d6:ad:5c:
38:10:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:10:29 2024 by rpki-client on console-fra.rpki-client.org