Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
File: m1M3vRp8XunFenOwozxhIZzSqcs.cer (raw, json)
Hash identifier: rk7BYNQdn71l0EL6cpnB0Imx91xwHdoXRuLf/DEyF0E=
Subject key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8DC99DE4257F18C3CD39142CAEF3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 149.153.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:dc:99:de:42:57:f1:8c:3c:d3:91:42:ca:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:91:90:bc:e5:86:27:79:bf:e9:2d:4e:3b:
9c:6d:fb:91:a8:4e:04:02:88:28:5e:f0:69:b7:92:
ae:91:21:cb:91:3f:55:95:db:b6:5c:fe:51:8b:96:
a1:14:ef:69:99:9b:fa:b8:d1:a9:4b:26:53:1a:17:
28:7b:2a:24:67:cd:b9:8d:aa:8b:73:d3:47:f2:93:
e9:9b:4f:57:9b:dd:15:ff:1a:3a:3f:0f:20:eb:e8:
17:b9:e0:19:aa:81:5a:7f:0f:0d:82:4b:34:e7:35:
6a:99:48:27:db:b0:ae:fe:9b:e1:0e:20:33:37:cc:
0d:a8:a5:ff:42:cf:77:c0:84:90:88:79:7b:49:a8:
ba:e4:08:ab:da:69:1a:cf:ae:d3:84:73:f4:cd:65:
08:27:3f:01:ed:97:2d:b9:28:2c:6a:dd:51:57:78:
3a:81:f2:80:e1:35:71:45:2b:1c:bc:7b:e0:5a:c8:
49:a3:a0:83:30:f0:a6:77:46:72:39:ea:55:fc:7b:
34:11:59:6f:c2:4d:d7:d0:92:42:00:f2:c1:6e:36:
33:12:df:b3:a9:65:86:25:71:aa:f1:44:5c:3e:1a:
cd:2d:51:27:c7:ed:3c:e1:cf:42:76:7f:b1:1d:6e:
76:a2:57:94:ee:6f:d6:dd:44:1e:7d:26:be:75:a3:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:e3:88:ed:b7:51:9e:46:8e:bb:cb:89:2e:14:3c:f3:9a:9d:
c2:14:dd:27:da:01:b5:b9:f5:6d:3b:9e:c6:a8:c4:21:8c:9d:
58:bc:59:fb:33:dc:02:ae:d3:d7:65:20:16:09:5a:a4:29:2c:
09:bb:ab:41:51:99:4e:7c:8f:ae:9e:7b:97:34:1c:1b:65:2e:
ae:3a:70:49:cb:c6:6b:7b:9d:a3:6a:64:d7:5d:b5:9b:a8:b0:
4c:31:86:c2:40:d4:2a:5c:29:2c:84:e9:ff:c7:bd:ee:e5:9a:
1b:1e:85:24:91:82:3e:fc:31:a4:3a:c8:22:36:c4:24:65:f2:
92:91:d0:b0:5a:32:31:a4:8f:2c:df:3b:6e:89:4e:5c:cb:f9:
c9:0d:e6:65:ce:0a:c8:e9:00:f7:bf:0e:35:c7:1e:43:a2:41:
01:f2:ee:50:17:d4:80:c1:5f:7a:23:e3:f8:d8:1a:67:98:8d:
72:e1:44:9e:96:99:62:21:d4:49:86:c3:45:ab:97:b8:90:c9:
2b:52:75:28:52:4b:fb:6f:17:25:04:14:02:be:b5:db:f1:bf:
25:58:cd:ed:de:b6:f6:01:d2:54:c1:17:20:69:b1:7e:6f:43:
f2:65:08:d8:e6:98:63:f9:ca:f1:1b:33:3f:9b:c5:d0:69:fd:
20:92:3a:59
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzGuNyZ3kJX8Yw805FCyu8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjUzMzdiZDFhN2M1ZWU5YzU3YTczYjBhMzNjNjEyMTljZDJhOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83SRkLzlhid5v+ktTjucbfuRqE4E
AogoXvBpt5KukSHLkT9Vldu2XP5Ri5ahFO9pmZv6uNGpSyZTGhcoeyokZ825jaqL
c9NH8pPpm09Xm90V/xo6Pw8g6+gXueAZqoFafw8Ngks05zVqmUgn27Cu/pvhDiAz
N8wNqKX/Qs93wISQiHl7Sai65Air2mkaz67ThHP0zWUIJz8B7ZctuSgsat1RV3g6
gfKA4TVxRSscvHvgWshJo6CDMPCmd0ZyOepV/Hs0EVlvwk3X0JJCAPLBbjYzEt+z
qWWGJXGq8URcPhrNLVEnx+084c9Cdn+xHW52oleU7m/W3UQefSa+daMW6wIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFJtTN70afF7pxXpzsKM8YSGc0qnLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzljYjVm
Yi1hYjY1LTRhMmItODhkZC0yZWY3MTY1YjIxYjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvOWNiNWZi
LWFiNjUtNGEyYi04OGRkLTJlZjcxNjViMjFiNS8xL20xTTN2UnA4WHVuRmVuT3dv
enhoSVp6U3Fjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAlZkwDQYJKoZIhvcNAQELBQADggEBABbjiO23
UZ5GjrvLiS4UPPOancIU3SfaAbW59W07nsaoxCGMnVi8Wfsz3AKu09dlIBYJWqQp
LAm7q0FRmU58j66ee5c0HBtlLq46cEnLxmt7naNqZNddtZuosEwxhsJA1CpcKSyE
6f/Hve7lmhsehSSRgj78MaQ6yCI2xCRl8pKR0LBaMjGkjyzfO26JTlzL+ckN5mXO
CsjpAPe/DjXHHkOiQQHy7lAX1IDBX3oj4/jYGmeYjXLhRJ6WmWIh1EmGw0Wrl7iQ
yStSdShSS/tvFyUEFAK+tdvxvyVYze3etvYB0lTBFyBpsX5vQ/JlCNjmmGP5yvEb
Mz+bxdBp/SCSOlk=
-----END CERTIFICATE-----
Generated at Fri May 3 02:12:38 2024 by rpki-client on console-ams.rpki-client.org