Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
File: mBPi9jUdO00eYapAFvGyz6YtfN8.cer (raw, json)
Hash identifier: UtGQ7FRRDq95gxhCtLvIH82qlg+SRPF3UWkAZ3c7Yi0=
Subject key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192FE2EC629799914DF3A3407CF99D31E74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Nov 2024 21:15:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51484
IP: 46.45.64.0/18
IP: 2a03:24c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fe:2e:c6:29:79:99:14:df:3a:34:07:cf:99:d3:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 21:15:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:85:ef:35:02:0d:0d:b9:7f:3d:14:22:fb:
7d:37:c7:d2:f7:1d:a5:12:69:c5:2b:1f:eb:93:e3:
62:00:19:5d:08:83:77:6c:2c:89:cf:a9:77:70:60:
39:82:bb:29:33:8b:16:7c:34:3c:f4:98:88:a8:12:
05:9d:71:04:8b:9f:24:8b:08:f6:6e:7c:41:71:b5:
d3:17:e7:26:36:4d:75:91:36:ae:4d:7d:7d:90:07:
b5:4a:1e:67:32:67:07:3a:e2:7d:34:ad:3d:ed:f7:
a6:c4:8f:6b:aa:94:91:e6:b0:9e:fd:08:50:3d:8b:
e2:bf:eb:3c:8b:31:dc:31:b0:3f:a3:84:ba:79:dd:
87:33:c2:72:dc:2b:dd:e9:5e:f6:e3:85:6c:1d:2b:
69:91:7c:f6:f2:3f:46:4b:6b:70:fb:52:9c:d2:42:
7b:04:84:d4:bd:95:00:57:93:44:8e:94:12:db:a8:
1f:a9:ca:18:f2:4c:98:a6:41:b4:29:64:59:3b:04:
ba:d4:39:ac:5c:55:76:df:7c:78:c6:c6:e4:30:07:
d5:8b:09:97:69:00:3b:2b:2c:f9:10:f5:8f:2a:55:
ad:8b:a1:59:37:87:0e:2d:93:75:77:6e:3c:1a:85:
08:a4:9f:95:e7:f0:a4:09:21:24:5c:f8:12:c2:7b:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.64.0/18
IPv6:
2a03:24c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51484
Signature Algorithm: sha256WithRSAEncryption
03:b5:b3:09:51:96:52:9d:02:19:04:c4:38:48:d1:c1:d1:33:
34:07:52:86:1a:1f:a4:af:cd:95:36:ab:e9:bc:d1:e8:bf:0b:
b8:7c:dd:14:74:2c:94:b9:60:f4:89:57:ba:d2:d2:99:b9:a0:
2c:54:95:bf:03:72:ec:8f:3f:a8:bf:4c:f2:54:8a:02:50:fe:
45:4e:42:9f:e4:fb:57:b4:f1:17:76:f1:68:d4:7a:c5:33:7d:
25:84:c1:f4:b2:86:af:1f:26:cd:65:bf:de:4e:bb:e9:4b:5d:
3d:3f:57:c3:de:b0:a0:a1:3c:65:bd:8e:aa:8e:1b:51:d9:ff:
46:a8:4d:f5:b6:24:bf:e2:bf:fb:5f:5e:6b:24:4f:d2:57:fd:
c0:42:13:f8:51:77:5c:90:7e:41:c1:2d:eb:36:da:e6:6c:6c:
da:8d:77:dc:dd:96:f9:d3:42:94:e2:c4:f5:5a:a0:ee:3a:f0:
c5:47:00:33:64:e5:9e:2d:c8:0e:70:36:a3:7e:1b:fa:49:63:
60:80:fe:22:77:30:3a:76:d7:54:89:77:8d:5b:27:df:9a:5b:
4a:ac:66:c2:c6:6e:b4:aa:23:3e:a1:60:4e:92:fd:b4:67:a1:
43:2d:6f:30:d4:21:93:54:28:b8:da:2e:64:c7:39:f9:2c:e7:
98:e4:c8:fa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZL+LsYpeZkU3zo0B8+Z0x50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTA1MjExNTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODEzZTJmNjM1MWQzYjRkMWU2MWFhNDAxNmYxYjJjZmE2MmQ3Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgiF7zUCDQ25fz0UIvt9N8fS9x2l
EmnFKx/rk+NiABldCIN3bCyJz6l3cGA5grspM4sWfDQ89JiIqBIFnXEEi58kiwj2
bnxBcbXTF+cmNk11kTauTX19kAe1Sh5nMmcHOuJ9NK097femxI9rqpSR5rCe/QhQ
PYviv+s8izHcMbA/o4S6ed2HM8Jy3Cvd6V7244VsHStpkXz28j9GS2tw+1Kc0kJ7
BITUvZUAV5NEjpQS26gfqcoY8kyYpkG0KWRZOwS61DmsXFV233x4xsbkMAfViwmX
aQA7Kyz5EPWPKlWti6FZN4cOLZN1d248GoUIpJ+V5/CkCSEkXPgSwntJcQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJgT4vY1HTtNHmGqQBbxss+mLXzfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzNmNzQ2
My00ZDRmLTQxYTYtOGQ3Mi0zOTUxMzc4YWE3NjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvM2Y3NDYz
LTRkNGYtNDFhNi04ZDcyLTM5NTEzNzhhYTc2Ni8xL21CUGk5alVkTzAwZVlhcEFG
dkd5ejZZdGZOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQGLi1AMA0EAgACMAcDBQAqAyTAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDJHDANBgkqhkiG9w0BAQsFAAOCAQEAA7WzCVGWUp0C
GQTEOEjRwdEzNAdShhofpK/NlTar6bzR6L8LuHzdFHQslLlg9IlXutLSmbmgLFSV
vwNy7I8/qL9M8lSKAlD+RU5Cn+T7V7TxF3bxaNR6xTN9JYTB9LKGrx8mzWW/3k67
6UtdPT9Xw96woKE8Zb2Oqo4bUdn/RqhN9bYkv+K/+19eayRP0lf9wEIT+FF3XJB+
QcEt6zba5mxs2o133N2W+dNClOLE9Vqg7jrwxUcAM2Tlni3IDnA2o34b+kljYID+
IncwOnbXVIl3jVsn35pbSqxmwsZutKojPqFgTpL9tGehQy1vMNQhk1QouNouZMc5
+SznmOTI+g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:21:07 2024 by rpki-client on console-fra.rpki-client.org