Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
File: MseO7vestFH8N1df65EU38zBzfs.cer (raw, json)
Hash identifier: ZZLTGjKhwWEbNE02Q3rpQSrxGgJyNkwIWlTkuBxQf88=
Subject key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D408E25374DE798583493FBF2E11CAA3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jan 2024 12:17:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202349
AS: 209235
AS: 210505
IP: 45.141.240.0/22
IP: 91.199.48.0/24
IP: 146.19.117.0/24
IP: 185.1.68.0/24
IP: 212.18.99.0/24
IP: 2001:7f8:118::/48
IP: 2a09:c0c0::/29
IP: 2a0d:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:8e:25:37:4d:e7:98:58:34:93:fb:f2:e1:1c:aa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 12:17:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:d2:40:45:64:69:a4:c8:d1:c1:60:a5:fb:
fb:b3:78:0e:2e:b9:2b:53:90:63:17:2d:aa:4f:1f:
97:fe:46:54:f5:52:40:23:de:04:2b:65:85:63:44:
b5:13:8b:69:f4:0f:ff:37:4c:48:15:07:11:9e:4b:
80:e9:3d:7a:77:25:ee:a2:56:45:1a:6c:c0:0a:be:
1f:38:f7:99:f5:98:53:d4:3c:80:e6:d0:38:0f:ff:
8f:60:46:27:3a:b0:85:e9:f4:e1:5d:29:af:3f:b1:
47:97:83:da:54:83:5f:d6:b4:13:ed:ee:1d:a5:cf:
4e:69:7e:18:6f:1b:97:64:1b:85:02:75:19:ff:42:
6a:4a:64:3b:e0:25:33:79:5f:fe:f4:15:13:e2:ef:
1f:b5:85:12:37:cb:ac:35:4b:18:f5:c7:2f:2a:79:
a5:0e:51:24:c1:99:f5:2b:a4:19:46:4d:80:f3:4f:
a5:a8:93:95:08:fd:a1:b5:b7:70:75:17:1f:b0:e2:
de:59:3f:21:27:1f:4d:c3:cc:3d:58:d8:8d:24:d2:
9d:3f:6b:d8:8f:3c:2c:1f:b1:9e:77:bc:a6:8d:72:
4a:f6:31:14:f5:a2:03:89:20:3c:41:fc:89:65:e5:
18:b5:07:3f:0a:f9:c7:47:ae:f4:ed:02:26:34:ca:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.240.0/22
91.199.48.0/24
146.19.117.0/24
185.1.68.0/24
212.18.99.0/24
IPv6:
2001:7f8:118::/48
2a09:c0c0::/29
2a0d:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202349
209235
210505
Signature Algorithm: sha256WithRSAEncryption
7b:cc:24:e1:8e:c7:14:86:65:79:46:b3:65:db:34:7b:aa:fe:
04:7d:aa:da:ec:1c:ee:ba:25:27:ff:9f:e5:f5:9b:52:cf:11:
f6:98:b0:19:04:90:c9:90:a5:c4:1a:1f:f3:b0:d7:8b:cb:b2:
c9:d7:d2:f8:78:8f:4d:c9:c7:13:5a:b7:4c:db:2d:4c:89:ef:
3f:5c:ba:14:26:ec:e6:92:70:1c:3b:16:1a:a3:ca:0d:64:14:
4a:e6:61:a1:7f:b7:0a:66:63:c0:85:0e:16:c4:ac:04:b9:75:
d4:1e:c9:6f:3a:85:54:04:2c:07:f8:cc:4d:76:45:99:9f:fc:
36:54:b3:58:2f:23:8f:c5:2f:c3:22:1f:5b:87:bb:da:40:3f:
83:db:17:df:48:a3:9a:3d:58:51:30:29:6c:16:d6:e1:2e:f6:
5a:c8:d0:84:b8:85:73:95:4a:0c:03:2a:3c:f5:90:5b:bd:10:
a5:dd:d2:b7:23:cf:d9:cc:0a:d9:05:27:0c:bd:b8:05:a0:5a:
31:2d:52:5e:9f:01:a6:62:8d:84:11:8c:0c:24:80:37:9c:f1:
ad:73:ce:97:16:6d:df:21:21:b3:b9:eb:c9:bc:8d:50:54:c4:
28:00:df:1d:27:0a:97:75:e3:ba:61:ec:53:9d:84:4e:91:d0:
98:63:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:07 2024 by rpki-client on console-ams.rpki-client.org