Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.cer (raw, json)
Hash identifier: lWczeqSNcwM11xe5odfIO8aQf8WT4bf76lqA0Zc7RZw=
Subject key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7933069786D93B0031894F697FDC357
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.99.208.0/21
IP: 185.155.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:30:69:78:6d:93:b0:03:18:94:f6:97:fd:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:fa:e3:de:ed:9e:ea:31:6f:e4:3e:b4:fd:
9d:20:b2:ff:79:06:44:1c:2e:f3:1f:9c:ef:f5:00:
83:6d:2e:9a:47:33:f7:bc:6f:62:02:d4:c3:51:48:
4e:e9:80:17:49:b5:28:e4:8e:4c:ba:0f:52:cb:76:
21:90:dd:2a:65:d5:30:e1:59:b1:b0:eb:5e:90:d9:
03:b1:1d:4f:35:92:df:30:b5:63:20:82:80:23:d9:
2c:f6:e8:b6:f7:ab:ed:1c:1f:6f:08:86:93:11:72:
53:64:18:e9:09:9f:12:3f:ad:63:b9:5d:8a:91:92:
83:88:f6:83:d5:c0:74:9f:39:0b:27:b4:d9:3f:c4:
fb:00:a9:38:25:23:43:36:e5:66:73:ea:e1:61:63:
98:31:a3:3b:df:16:01:f6:f7:5d:bf:67:58:3d:c5:
e6:ad:d0:eb:b7:65:81:01:3c:b8:82:6b:f7:c0:49:
ad:10:83:58:1a:09:d7:68:bc:72:e1:bc:fc:8a:a5:
79:88:63:c5:1b:94:4a:04:17:36:50:f2:77:7b:96:
d4:8d:79:a8:10:d7:3c:b4:49:a7:e3:1a:50:a8:01:
2b:98:f1:80:49:0c:72:3b:0a:6f:fe:79:d3:72:fc:
4b:b2:5c:3c:eb:f5:54:6d:91:75:ba:34:c4:eb:fa:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.208.0/21
185.155.196.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d5:f4:af:7f:12:0b:51:c7:a5:93:69:84:4b:6f:68:cd:30:
8a:87:b9:6c:74:44:08:16:d6:ae:a3:73:8e:21:1b:4c:f8:53:
16:3b:22:86:26:f9:55:e1:70:a4:64:31:1f:44:ba:f6:03:92:
c6:25:34:e9:18:9c:a4:46:4b:47:90:22:28:84:36:71:6d:75:
fd:4e:70:e7:e6:8c:47:c6:f9:9b:b2:60:8e:59:1b:4b:5b:9b:
ab:42:80:38:1e:6c:3b:40:71:b2:bf:f8:95:1f:c9:91:e6:60:
d4:7c:40:b1:33:2a:39:d8:64:78:c5:d5:cb:ff:88:00:e5:b7:
ec:11:a5:15:75:31:15:e0:e5:93:ff:da:53:79:5e:31:a3:e9:
96:e1:8e:24:63:2f:b5:50:34:9f:ae:d0:5c:2f:8a:80:46:56:
27:5e:44:b8:e6:4b:4d:2a:51:c9:25:7a:9e:e5:70:e7:7a:0f:
a4:b5:c3:cd:98:31:5d:6b:66:f6:8c:ca:e0:64:ef:dd:f6:06:
69:36:d4:d6:13:be:95:89:6b:bb:31:14:0f:78:57:5c:63:c7:
67:1c:00:45:51:03:9f:4f:fd:6c:f5:c8:5c:b1:6f:d0:78:68:
66:1e:75:34:65:d8:09:fb:ec:c7:fc:38:76:49:66:ab:35:2a:
93:a8:ec:3c
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYzHkzBpeG2TsAMYlPaX/cNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWQ1ZDEyODhhM2MyYWUxN2Y5OWNiYjE4OTE3NzAwMTg5YmQ0NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj/6497tnuoxb+Q+tP2dILL/eQZE
HC7zH5zv9QCDbS6aRzP3vG9iAtTDUUhO6YAXSbUo5I5Mug9Sy3YhkN0qZdUw4Vmx
sOtekNkDsR1PNZLfMLVjIIKAI9ks9ui296vtHB9vCIaTEXJTZBjpCZ8SP61juV2K
kZKDiPaD1cB0nzkLJ7TZP8T7AKk4JSNDNuVmc+rhYWOYMaM73xYB9vddv2dYPcXm
rdDrt2WBATy4gmv3wEmtEINYGgnXaLxy4bz8iqV5iGPFG5RKBBc2UPJ3e5bUjXmo
ENc8tEmn4xpQqAErmPGASQxyOwpv/nnTcvxLslw86/VUbZF1ujTE6/qJowIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFInV0SiKPCrhf5nLsYkXcAGJvUcgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzhkMTc1
Ni0yMjVmLTQ1NzktYjFlNi05ZDYwOTc3MGE5ZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvOGQxNzU2
LTIyNWYtNDU3OS1iMWU2LTlkNjA5NzcwYTllYS8xL2lkWFJLSW84S3VGX21jdXhp
UmR3QVltOVJ5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDJWPQAwQCuZvEMA0GCSqGSIb3DQEBCwUAA4IB
AQAz1fSvfxILUcelk2mES29ozTCKh7lsdEQIFtauo3OOIRtM+FMWOyKGJvlV4XCk
ZDEfRLr2A5LGJTTpGJykRktHkCIohDZxbXX9TnDn5oxHxvmbsmCOWRtLW5urQoA4
Hmw7QHGyv/iVH8mR5mDUfECxMyo52GR4xdXL/4gA5bfsEaUVdTEV4OWT/9pTeV4x
o+mW4Y4kYy+1UDSfrtBcL4qARlYnXkS45ktNKlHJJXqe5XDneg+ktcPNmDFda2b2
jMrgZO/d9gZpNtTWE76ViWu7MRQPeFdcY8dnHABFUQOfT/1s9chcsW/QeGhmHnU0
ZdgJ++zH/Dh2SWarNSqTqOw8
-----END CERTIFICATE-----
Generated at Fri May 3 03:37:19 2024 by rpki-client on console-fra.rpki-client.org