Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer
File: MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer (raw, json)
Hash identifier: lsZXmjVYzlT+90SKQo7pAMgNsLzYURzMxwjamK/wT6I=
Subject key identifier: 32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A814187E80C778DED62275B9980F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204983
IP: 185.233.172.0/22
IP: 2a0c:eb00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:81:41:87:e8:0c:77:8d:ed:62:27:5b:99:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320444c0c2990b13749f3044662297ea824d5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:62:bd:da:88:ce:f9:2e:ac:29:f2:1d:a9:
d7:6d:b4:8f:1a:62:1d:c8:e3:17:8a:c9:1e:b5:d7:
f0:ac:38:8b:49:be:c6:46:16:d4:59:22:9b:b7:70:
d0:ed:bd:10:a5:23:fe:68:c0:91:fe:b2:5a:b4:b2:
ec:e7:9e:25:c2:f4:ad:de:2c:ff:1c:a9:a0:a2:f1:
83:22:97:43:2b:8f:78:b7:b4:6c:57:47:21:1b:e8:
10:44:81:d1:ea:e9:40:85:9d:b6:79:71:fe:b8:e5:
76:70:b8:16:df:2d:ff:a3:9d:b2:f0:73:d0:c1:45:
2a:22:93:37:13:e2:fa:1b:a3:a5:6a:4a:c3:07:11:
1c:a4:e2:cb:05:92:0b:35:d9:6d:4e:30:5c:e7:67:
09:60:66:c4:7f:3e:80:77:3e:5c:18:c4:e9:42:25:
d4:2e:26:a5:cd:94:ac:1a:b8:49:e2:29:80:a2:bb:
f4:97:e5:83:ea:b4:36:c8:88:73:c4:d1:87:54:1c:
e1:1e:d4:61:5c:83:07:6a:3e:bf:1b:62:f7:53:18:
56:44:28:ca:a2:2e:fb:1a:ae:0f:6c:fc:e1:42:b3:
44:48:ed:dd:9e:e8:4b:21:09:68:85:a9:68:d5:9e:
1f:9e:ef:fe:73:8e:cd:0c:4c:b0:7a:42:56:50:c1:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.172.0/22
IPv6:
2a0c:eb00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204983
Signature Algorithm: sha256WithRSAEncryption
22:1f:34:d4:39:cc:bb:6e:1f:92:0b:1e:68:e0:a3:aa:cd:0f:
24:36:9c:a5:11:be:63:ba:8d:eb:ac:b5:db:21:60:99:a7:4f:
7e:5c:e1:3b:f6:0b:d0:c8:10:4f:c2:e4:89:0c:11:59:c8:23:
b8:8b:78:f3:98:29:2f:31:0d:e1:cf:58:a9:c8:f3:92:bb:bb:
39:51:f0:c7:97:5b:10:c8:46:c0:46:d7:a8:f6:68:56:94:33:
f3:d7:68:27:d5:c3:20:4d:5f:8e:0b:fb:f4:67:06:10:47:97:
6a:35:73:88:d4:3b:df:1c:09:19:c3:47:41:08:2f:81:e1:50:
32:6d:61:e0:de:5a:a2:53:a0:3d:8f:e9:a4:c8:cf:dd:4a:3c:
fc:4f:f5:a3:ce:28:38:b5:a1:92:d6:66:01:74:c8:88:7d:36:
e4:6b:37:7e:ba:c4:0b:d5:2e:a8:ce:a7:c4:e9:e5:9d:6d:28:
55:df:6a:0c:d4:cc:fc:fb:6a:45:da:a4:f3:3f:10:4a:3f:45:
9e:15:5b:f5:b7:0f:fb:9d:65:9c:f1:ed:06:26:d7:99:3f:a9:
64:22:43:06:20:00:3a:47:a8:9c:e2:f7:ba:33:3e:af:a7:d7:
ea:47:1a:f7:c9:5f:fe:bc:37:cd:ee:ce:d0:b6:3f:2f:d3:b0:
b0:2d:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:18 2024 by rpki-client on console-fra.rpki-client.org