Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer (raw, json)
Hash identifier: EMX5SmPUBdvFPgai0xZAx04yNN3Xa3G0Sk13q02oXwE=
Subject key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80122C50C2D51974550662554117989
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51941
IP: 46.183.72.0/21
IP: 185.128.252.0/22
IP: 2a02:2380::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:22:c5:0c:2d:51:97:45:50:66:25:54:11:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:9d:05:b4:82:a7:09:2a:e8:a0:d5:84:eb:
6f:d0:84:80:be:29:a1:16:66:76:92:ec:79:15:9d:
4d:83:de:43:03:b5:3f:ff:97:59:b4:45:a5:62:d5:
d4:ca:89:af:9a:0d:aa:5a:89:32:e9:c2:7a:7d:d1:
3d:1a:10:3d:78:6c:39:f8:a4:12:6d:f8:c5:ed:4c:
11:1b:3a:e6:b9:3e:9f:d3:1e:ef:d7:64:c4:49:2c:
e2:b6:16:93:ae:60:8b:01:3b:aa:a3:27:90:0a:2f:
8f:80:08:a3:82:73:00:7a:ea:aa:f4:f5:6b:90:fa:
ae:d2:3b:37:b9:7e:db:2e:b8:2d:3b:58:9e:0e:4f:
5a:43:99:df:1d:ea:64:87:76:98:5d:ee:ca:b0:74:
17:be:30:3f:5d:f2:3c:f3:e2:e8:c9:0f:03:7d:c3:
43:f5:97:4b:e8:c7:13:5f:c8:6f:8d:e1:70:d5:61:
9e:9c:75:86:4c:0c:ce:f2:7c:94:ef:a9:f5:cd:9a:
54:86:ff:e6:c4:97:8b:11:03:ee:29:9a:19:35:a4:
ce:61:51:b7:c4:d2:bf:3f:65:f3:c0:ce:3d:d8:fc:
53:fa:eb:fd:c2:82:13:3f:16:4c:29:fc:c6:85:74:
cd:63:52:c2:fd:15:90:c7:e0:91:72:3d:4a:43:17:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.72.0/21
185.128.252.0/22
IPv6:
2a02:2380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51941
Signature Algorithm: sha256WithRSAEncryption
01:42:d4:96:cf:53:b7:29:9e:0b:42:84:e4:f0:71:80:f8:f5:
79:d1:47:37:cd:4e:1c:20:ec:65:0e:2f:ed:f2:5e:1d:5d:4a:
2c:0c:19:af:93:3f:57:b3:ee:5a:19:91:f7:89:50:18:52:50:
2b:92:a7:c1:bc:0d:19:f8:f7:70:88:72:84:43:83:9e:89:09:
e7:61:d4:0c:ce:c8:67:74:9a:c1:96:0a:e2:ad:8a:3c:c7:6a:
21:5c:c6:d9:35:ea:40:7d:34:e8:88:fa:62:73:17:25:c5:16:
56:03:e8:4b:f4:56:56:47:0d:99:aa:d4:8e:bf:52:4d:53:5b:
81:a3:5c:e6:10:31:d3:5c:0f:23:fa:0e:91:f2:c3:7b:6f:24:
83:05:87:4b:23:43:57:09:2b:88:eb:9d:a4:31:9c:32:79:c6:
4e:40:e3:33:7f:9c:be:e2:68:18:52:3e:5a:cc:f3:cb:7e:6b:
ce:74:44:c2:c8:01:ef:a5:76:b4:4f:5a:48:e2:21:11:a3:74:
ed:9a:20:1e:b6:29:3a:a6:24:f8:ee:03:f0:9c:31:30:f8:9f:
c7:c7:f7:bc:b8:56:7b:21:f7:63:0f:13:6b:51:d9:04:fa:ea:
27:90:31:ee:3b:f6:76:0c:38:89:fd:53:22:40:4d:f6:3d:67:
53:06:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:29:52 2024 by rpki-client on console-ams.rpki-client.org