Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer (raw, json)
Hash identifier: S/u1Bm6Ub7x+8k0wXutSvgyXc26M9mLdC36snS6WkbE=
Subject key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B669C74C92E1B7AD8C43BF361E199
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208252
IP: 45.150.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:66:9c:74:c9:2e:1b:7a:d8:c4:3b:f3:61:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31533690ab184f433f1760f3feaa184c443e70f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:aa:ef:19:5d:f5:32:bd:82:e8:d1:f7:c9:
12:f3:20:b9:18:7c:96:02:11:e0:87:59:d7:f0:73:
29:0c:3e:54:62:aa:0d:11:97:9c:73:97:97:f5:98:
c6:2a:b0:9f:40:c2:0d:1b:b0:e7:ff:2b:5c:03:e0:
28:ba:a9:ad:89:c4:4f:a1:d5:3a:7c:88:13:e3:9a:
6e:53:ef:98:8a:3d:70:2d:78:32:74:6f:1a:e9:b4:
1f:60:f2:b9:c0:38:dd:03:c0:8c:b0:eb:48:23:b8:
96:0c:67:cc:5b:be:9f:a6:46:8b:4b:8d:b6:fe:d4:
aa:77:ea:8c:c9:53:91:7f:79:f4:f6:e9:74:7c:2c:
52:eb:0b:0c:17:b2:9f:a9:e9:8f:20:83:e0:88:5e:
af:b8:29:fe:71:cc:7f:41:4c:ef:c4:30:4c:7d:17:
f5:42:ab:3a:c0:0f:26:a6:dc:83:ec:6a:da:36:37:
53:2a:6e:35:f0:2e:d5:9e:0d:55:5f:55:f3:b3:0b:
6b:6b:e1:78:18:6f:71:72:9a:98:f9:ff:28:8a:c2:
d1:c6:99:01:8f:5a:e7:27:43:e1:7b:57:f9:10:9d:
80:51:90:1c:71:a4:ce:ce:76:60:59:e3:5a:54:b4:
83:1a:fb:7b:78:1f:3f:45:29:75:d1:ac:78:d8:3c:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208252
Signature Algorithm: sha256WithRSAEncryption
08:28:09:51:0e:85:a7:cd:4f:99:6b:36:58:e3:3d:9e:f5:58:
26:67:3d:20:4f:4e:70:fe:02:a5:aa:f0:31:f2:26:be:43:91:
28:d8:82:0b:d7:44:6c:1b:23:9e:bc:6b:53:fd:8b:c9:97:39:
f5:98:33:cc:64:b9:86:17:45:40:af:b8:6e:2f:22:84:e4:24:
c3:b6:9b:e8:05:51:3d:ff:06:f6:0f:bb:fc:77:91:1c:48:91:
1c:4c:3c:a7:29:25:4c:91:d0:19:ab:ce:a0:fc:6d:a3:5c:69:
4d:aa:c9:ff:d7:e2:88:1d:1e:47:98:90:46:cd:bb:a0:37:c8:
75:88:be:ac:1c:e6:38:cd:9b:bc:dc:74:0a:4a:36:ce:0d:d0:
b9:73:98:95:b4:d7:64:71:78:46:37:5e:0f:aa:1f:c9:02:c9:
0f:84:ad:7f:b5:86:d5:29:98:b5:28:96:d4:13:91:e2:34:bb:
cb:e9:dd:bc:98:1f:96:40:8a:cb:53:bc:17:47:da:30:2a:8c:
7b:9e:d3:d4:3d:eb:71:06:7e:86:0a:0a:9e:b8:e4:07:a5:ed:
b2:02:90:63:37:08:aa:1a:6f:b0:a9:03:13:b9:11:e4:2b:b8:
75:12:3f:ce:8f:7c:0d:ad:04:e1:56:ad:79:4b:57:30:a0:d1:
18:6d:5f:02
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQma2acdMkuG3rYxDvzYeGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTUzMzY5MGFiMTg0ZjQzM2YxNzYwZjNmZWFhMTg0YzQ0M2U3MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83Cq7xld9TK9gujR98kS8yC5GHyW
AhHgh1nX8HMpDD5UYqoNEZecc5eX9ZjGKrCfQMING7Dn/ytcA+AouqmticRPodU6
fIgT45puU++Yij1wLXgydG8a6bQfYPK5wDjdA8CMsOtII7iWDGfMW76fpkaLS422
/tSqd+qMyVORf3n09ul0fCxS6wsMF7KfqemPIIPgiF6vuCn+ccx/QUzvxDBMfRf1
Qqs6wA8mptyD7GraNjdTKm418C7Vng1VX1Xzswtra+F4GG9xcpqY+f8oisLRxpkB
j1rnJ0Phe1f5EJ2AUZAccaTOznZgWeNaVLSDGvt7eB8/RSl10ax42Dx0GwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDFTNpCrGE9DPxdg8/6qGExEPnD5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2I2Mzhh
NS1kOTAzLTRhMzEtOTQ4OS1jYjkyYmIzZWQ3NjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYjYzOGE1
LWQ5MDMtNGEzMS05NDg5LWNiOTJiYjNlZDc2OC8xL01WTTJrS3NZVDBNX0YyRHpf
cW9ZVEVRLWNQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLZb4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMtfDANBgkqhkiG9w0BAQsFAAOCAQEACCgJUQ6Fp81PmWs2WOM9nvVYJmc9IE9O
cP4CparwMfImvkORKNiCC9dEbBsjnrxrU/2LyZc59ZgzzGS5hhdFQK+4bi8ihOQk
w7ab6AVRPf8G9g+7/HeRHEiRHEw8pyklTJHQGavOoPxto1xpTarJ/9fiiB0eR5iQ
Rs27oDfIdYi+rBzmOM2bvNx0Cko2zg3QuXOYlbTXZHF4RjdeD6ofyQLJD4Stf7WG
1SmYtSiW1BOR4jS7y+ndvJgflkCKy1O8F0faMCqMe57T1D3rcQZ+hgoKnrjkB6Xt
sgKQYzcIqhpvsKkDE7kR5Cu4dRI/zo98Da0E4VateUtXMKDRGG1fAg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:40 2025 by rpki-client