Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
File: MvBHo0IShysLH_gE7gIrAq91_-0.cer (raw, json)
Hash identifier: LUxkyeVm8syxY5uFcwjtJySqLWjCDwToW8fwf4bGv9g=
Subject key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5A47DF4BC51CE48AC5A5F1F4F86F4139
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 12:11:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42879
IP: 194.15.240.0/21
IP: 194.42.46.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:47:df:4b:c5:1c:e4:8a:c5:a5:f1:f4:f8:6f:41:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 12:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:fa:9e:e9:78:30:19:80:7f:b9:40:3f:f7:
a1:71:27:9e:5d:46:45:c0:df:6f:08:cd:41:78:51:
dd:62:4c:0b:06:b3:95:c9:07:a6:ce:00:78:41:6f:
88:a9:e3:a5:72:b8:e7:3a:9c:e9:64:3b:8c:1e:57:
d4:2b:fc:62:20:8d:7d:b3:ff:86:60:03:ce:34:35:
fe:3d:4e:63:3d:8a:9d:6c:a1:7e:97:38:6c:48:68:
f8:0e:6b:de:bc:cb:62:97:cf:bd:0f:4b:48:a5:34:
fb:9a:19:c1:4e:f8:b0:42:fe:d6:67:6f:84:9e:28:
ee:40:b0:83:3e:f0:da:79:24:ca:f1:04:ed:14:f7:
eb:73:17:e3:1b:bd:02:4c:52:bc:2f:34:e9:87:84:
8f:c0:9b:98:d7:04:5a:c8:e6:87:77:8f:9d:ca:7b:
a4:46:dc:ff:52:5e:82:1e:af:6b:f9:7b:22:59:94:
7e:81:56:be:0a:79:3a:b6:d4:a5:4e:3e:2e:4d:65:
33:85:bc:bb:94:58:f2:46:97:bf:f7:f9:6a:51:cb:
c3:6f:60:f4:e5:45:52:96:07:29:ee:ab:23:50:dd:
d1:b9:13:da:47:79:e1:8c:36:24:b7:35:d6:11:58:
73:e0:8d:e4:75:40:13:db:d7:51:a1:a1:56:22:29:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.240.0/21
194.42.46.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42879
Signature Algorithm: sha256WithRSAEncryption
4b:81:b0:bd:88:b8:b4:80:f3:53:34:f1:48:75:e2:66:a1:3a:
13:93:d0:60:ea:d3:89:7d:1f:2b:01:99:64:e7:48:fb:32:f9:
6d:1c:50:1b:cf:50:71:e5:ca:ec:b1:55:fe:f5:e2:d1:8c:76:
4f:56:32:2d:1e:28:30:02:ca:11:19:d9:7a:ed:a1:5d:25:37:
d2:65:6e:07:fc:35:98:c2:5a:66:a3:93:14:b7:e2:54:de:09:
37:ae:7f:8b:a2:82:93:12:a4:ff:4f:8b:36:72:e2:47:a6:ee:
a0:20:ed:f2:4e:96:4b:54:e0:33:ab:53:64:8d:dd:58:98:b7:
b7:17:34:93:5f:99:94:54:39:41:7a:20:0d:1c:00:e1:6a:d3:
f1:72:ee:38:cf:bb:7f:7e:01:49:9d:55:d3:11:05:2d:f6:8d:
ed:8c:12:be:be:3f:70:fa:9d:66:24:c2:14:c7:4f:79:92:b7:
6a:3e:54:51:11:ed:41:6a:93:06:9c:64:4f:aa:59:58:9d:ad:
25:e5:f6:3c:76:4f:f8:4d:1b:91:43:5a:ab:8d:10:5e:fa:d0:
20:1b:ea:bb:82:e5:1e:b5:de:ed:b4:bc:ab:46:90:ba:9b:5d:
53:92:a7:fe:97:a1:b7:b4:02:d0:f7:21:11:f7:11:1b:8b:19:
a4:74:2f:5d
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAY1aR99LxRzkisWl8fT4b0E5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTMwMTIxMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmYwNDdhMzQyMTI4NzJiMGIxZmY4MDRlZTAyMmIwMmFmNzVmZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfn6nul4MBmAf7lAP/ehcSeeXUZF
wN9vCM1BeFHdYkwLBrOVyQemzgB4QW+IqeOlcrjnOpzpZDuMHlfUK/xiII19s/+G
YAPONDX+PU5jPYqdbKF+lzhsSGj4DmvevMtil8+9D0tIpTT7mhnBTviwQv7WZ2+E
nijuQLCDPvDaeSTK8QTtFPfrcxfjG70CTFK8LzTph4SPwJuY1wRayOaHd4+dynuk
Rtz/Ul6CHq9r+XsiWZR+gVa+Cnk6ttSlTj4uTWUzhby7lFjyRpe/9/lqUcvDb2D0
5UVSlgcp7qsjUN3RuRPaR3nhjDYktzXWEVhz4I3kdUAT29dRoaFWIikavQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFDLwR6NCEocrCx/4BO4CKwKvdf/tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2RlZTdl
MS1jZjUxLTQzY2ItYWQzNi03ZmFlMDY1YjY0NmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZGVlN2Ux
LWNmNTEtNDNjYi1hZDM2LTdmYWUwNjViNjQ2YS8xL012QkhvMElTaHlzTEhfZ0U3
Z0lyQXE5MV8tMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDwg/wAwQAwiouMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCnfzANBgkqhkiG9w0BAQsFAAOCAQEAS4GwvYi4tIDzUzTxSHXiZqE6
E5PQYOrTiX0fKwGZZOdI+zL5bRxQG89QceXK7LFV/vXi0Yx2T1YyLR4oMALKERnZ
eu2hXSU30mVuB/w1mMJaZqOTFLfiVN4JN65/i6KCkxKk/0+LNnLiR6buoCDt8k6W
S1TgM6tTZI3dWJi3txc0k1+ZlFQ5QXogDRwA4WrT8XLuOM+7f34BSZ1V0xEFLfaN
7YwSvr4/cPqdZiTCFMdPeZK3aj5UURHtQWqTBpxkT6pZWJ2tJeX2PHZP+E0bkUNa
q40QXvrQIBvqu4LlHrXe7bS8q0aQuptdU5Kn/peht7QC0PchEfcRG4sZpHQvXQ==
-----END CERTIFICATE-----
Generated at Fri May 3 13:12:57 2024 by rpki-client on console-fra.rpki-client.org