Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
File: Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer (raw, json)
Hash identifier: sAYUIAQI7BgUl2Tbe5T+pjrFKsa1lv0aAhBRd0zUMeY=
Subject key identifier: 31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8014DC4FA3E4DEC04DD7A046441EEE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202334
IP: 185.85.255.0/24
IP: 185.243.136.0/22
IP: 2a0c:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4d:c4:fa:3e:4d:ec:04:dd:7a:04:64:41:ee:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fa64addcb0f86580c388912341cc47c39c4aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:f0:7b:87:95:a8:f1:2e:02:1f:27:c5:80:
02:2f:94:a7:d8:3b:ab:19:c1:82:97:5b:fd:eb:47:
c2:4b:61:bd:4f:da:8f:13:9a:b5:8d:9c:9e:34:f5:
b8:9d:35:3f:ad:5b:e0:84:9b:be:2e:4b:02:88:3e:
1c:c4:f9:bf:f0:92:96:8f:d3:ad:c0:b7:13:be:4d:
bd:8d:68:0e:58:5a:c6:9d:34:de:07:d3:44:59:5e:
0e:9e:1e:03:9d:da:1d:03:ee:c8:a5:23:96:df:96:
d6:a6:43:c8:bb:22:d3:c2:65:8b:83:02:33:7b:66:
13:88:99:1a:62:03:df:b1:0d:48:1b:fe:8c:0d:79:
03:37:07:63:83:dd:d4:43:4b:dd:94:9e:df:a4:79:
db:6e:5a:da:d5:b3:e7:b1:b9:d2:e2:f7:52:0f:73:
df:1f:08:bb:33:2b:86:ff:64:74:98:c0:aa:80:6a:
8e:74:36:4e:88:a1:bd:8f:c3:26:be:e1:14:40:53:
30:1b:2d:30:00:41:b2:cb:0e:52:4c:4e:e7:1c:32:
f7:76:bf:34:1d:47:8f:b8:4a:9f:fc:e7:27:fc:23:
04:46:22:aa:03:78:46:d2:3a:27:86:9f:32:2c:96:
ca:e9:fa:aa:dc:58:03:16:e2:09:cf:23:d0:d6:d5:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.255.0/24
185.243.136.0/22
IPv6:
2a0c:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202334
Signature Algorithm: sha256WithRSAEncryption
11:75:18:bf:cd:7c:d4:8f:ed:fb:f3:79:b1:30:92:09:58:c1:
e1:cd:6d:7e:02:6b:41:3a:d9:c2:2b:85:43:56:c8:bc:6d:b2:
0c:5a:5d:d3:18:f4:ed:b0:f6:ed:11:bb:ef:32:65:69:6e:78:
a6:7d:cc:25:87:e4:ef:85:33:50:94:04:db:09:77:95:59:20:
c1:e7:c0:db:6e:92:31:ef:17:8b:a6:57:96:5d:c9:50:c2:a4:
72:92:fd:8b:a2:6e:74:41:c0:22:a3:37:ff:1c:e0:d7:2a:ce:
34:38:c2:f4:d3:94:f5:b2:ce:3a:86:8b:e7:1c:84:18:0d:b4:
12:ac:73:61:f8:13:de:e0:78:5c:4c:61:27:5d:2a:d3:38:af:
b8:ff:e1:1f:cf:5d:58:28:d1:91:d5:af:72:06:21:22:9e:ba:
70:f3:a4:cb:8a:7c:76:7c:cb:f6:c0:54:99:be:c8:b0:85:84:
79:b5:5a:de:1a:df:af:6a:87:f0:e8:fc:3d:05:9d:86:42:73:
a6:d4:f8:3a:77:28:ad:5d:0f:fc:05:f6:ad:54:d9:46:db:cb:
4d:a6:30:84:30:21:87:37:07:78:4c:ed:e1:12:40:e4:4c:73:
62:ac:f9:b5:fe:b6:0e:00:c7:03:07:71:26:cc:22:cb:9a:e3:
07:fd:a7:65
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzIAU3E+j5N7ATdegRkQe7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWZhNjRhZGRjYjBmODY1ODBjMzg4OTEyMzQxY2M0N2MzOWM0YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZjwe4eVqPEuAh8nxYACL5Sn2Dur
GcGCl1v960fCS2G9T9qPE5q1jZyeNPW4nTU/rVvghJu+LksCiD4cxPm/8JKWj9Ot
wLcTvk29jWgOWFrGnTTeB9NEWV4Onh4DndodA+7IpSOW35bWpkPIuyLTwmWLgwIz
e2YTiJkaYgPfsQ1IG/6MDXkDNwdjg93UQ0vdlJ7fpHnbblra1bPnsbnS4vdSD3Pf
Hwi7MyuG/2R0mMCqgGqOdDZOiKG9j8MmvuEUQFMwGy0wAEGyyw5STE7nHDL3dr80
HUePuEqf/Ocn/CMERiKqA3hG0jonhp8yLJbK6fqq3FgDFuIJzyPQ1tVRyQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFDH6ZK3csPhlgMOIkSNBzEfDnErtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzZhZmEz
Yy1jMDY5LTQ2MDQtOWRmOC03YjNmODJlZTI1ODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNmFmYTNj
LWMwNjktNDYwNC05ZGY4LTdiM2Y4MmVlMjU4Ny8xL01mcGtyZHl3LUdXQXc0aVJJ
MEhNUjhPY1N1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAuVX/AwQCufOIMA0EAgACMAcDBQMqDP2AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWXjANBgkqhkiG9w0BAQsFAAOCAQEAEXUY
v8181I/t+/N5sTCSCVjB4c1tfgJrQTrZwiuFQ1bIvG2yDFpd0xj07bD27RG77zJl
aW54pn3MJYfk74UzUJQE2wl3lVkgwefA226SMe8Xi6ZXll3JUMKkcpL9i6JudEHA
IqM3/xzg1yrONDjC9NOU9bLOOoaL5xyEGA20EqxzYfgT3uB4XExhJ10q0zivuP/h
H89dWCjRkdWvcgYhIp66cPOky4p8dnzL9sBUmb7IsIWEebVa3hrfr2qH8Oj8PQWd
hkJzptT4OncorV0P/AX2rVTZRtvLTaYwhDAhhzcHeEzt4RJA5ExzYqz5tf62DgDH
AwdxJswiy5rjB/2nZQ==
-----END CERTIFICATE-----
Generated at Fri May 3 10:10:38 2024 by rpki-client on console-fra.rpki-client.org