Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.cer (raw, json)
Hash identifier: 8HIk4dfUgr3S4tk45SeW+4xBHdy5D4p/N52Ed+uoI9w=
Subject key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E84DC2AABAECD9BA90F05C9B690BE64C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Mar 2024 11:40:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48876
IP: 194.79.250.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:dc:2a:ab:ae:cd:9b:a9:0f:05:c9:b6:90:be:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 28 11:40:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:58:0a:c0:d5:8d:13:b6:63:a3:72:5e:64:42:
e8:a8:37:f2:eb:37:38:82:95:87:b3:0c:1d:e0:e8:
96:35:68:3e:f7:b3:31:1e:ff:eb:fc:da:98:da:69:
5f:32:71:1c:ad:2d:8e:59:da:e0:84:a6:ef:67:98:
25:df:7e:d9:c0:10:88:eb:78:13:08:ec:ef:77:2f:
d1:a5:33:fa:f7:4b:03:92:c3:c0:db:76:25:47:39:
a2:0f:06:a0:d0:ad:1b:cb:61:25:1c:69:7a:a9:c6:
79:51:e5:4e:ac:45:ca:dc:0c:15:ac:1e:f9:99:cd:
75:a5:3a:1a:64:21:e8:22:b3:b0:8c:d0:fa:51:15:
b1:37:00:75:cd:be:56:a5:ec:81:3a:3f:0e:45:3c:
b2:b2:1f:90:c6:9e:15:4d:8e:d3:64:05:34:73:39:
26:f9:7a:fa:0b:a9:e6:2e:78:13:54:2e:bc:a0:a6:
15:73:6a:3a:34:2a:2f:f7:05:b6:b2:bc:14:b7:e9:
4e:31:75:eb:35:ce:d5:1d:d8:22:34:44:c6:8c:2f:
36:aa:3c:77:4e:c4:f4:eb:09:c3:1c:8c:55:77:93:
4b:51:35:09:a4:9f:f2:55:24:03:a0:fe:83:27:7d:
36:f4:b7:65:8c:ea:57:b3:eb:5e:10:81:18:99:5a:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48876
Signature Algorithm: sha256WithRSAEncryption
34:82:4c:0d:79:6f:3a:24:53:7f:a8:b8:5b:d1:9d:9f:90:e0:
97:8d:7b:53:03:a1:3f:22:90:11:76:d6:f1:f7:66:42:18:aa:
cc:55:c7:21:e8:09:d8:cd:08:80:e4:d5:26:80:4f:85:ef:a1:
00:a6:f5:80:c8:29:ec:5b:51:cc:62:e5:a5:2b:f9:e3:c5:47:
7a:ce:22:2b:14:7d:93:7c:f7:ab:51:9a:b7:33:01:62:e7:39:
9f:f1:38:63:b4:30:53:84:1d:f6:18:22:10:c7:c4:25:bd:2d:
31:87:86:a8:71:b1:c3:e6:e7:77:26:94:2d:d1:f3:64:31:42:
f6:0a:cd:74:31:6f:57:f7:e8:fe:44:4c:2f:2e:2b:24:57:8f:
2c:b7:ed:aa:4f:b9:6c:66:e8:f1:62:34:8e:e8:b3:73:c2:63:
fd:fd:0d:e6:6c:05:9a:0f:ae:29:3c:9e:87:01:fe:f5:4c:7e:
3c:76:79:1c:fe:b9:be:89:48:e9:fb:0b:e8:df:da:74:de:75:
eb:bf:52:46:78:5d:4d:f7:8c:81:99:ee:54:77:82:6b:31:26:
4e:d7:c3:a3:48:15:05:a3:16:a7:29:91:f8:c8:45:ce:18:cf:
2b:e5:4f:a8:be:b2:73:24:7a:37:b8:c1:f1:39:dc:09:51:c3:
9e:01:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:04:27 2024 by rpki-client on console-ams.rpki-client.org