Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
File: mKUzMIdAu70he_adzpCz9UEghFc.cer (raw, json)
Hash identifier: JN49ENK3ksIcNKwrA3J/Es+LEYItA9Sap+ZaxDhxvHk=
Subject key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF97AC48B60022A2093F56D3A58733
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51557
IP: 93.89.224.0/20
IP: 185.33.232.0/22
IP: 185.111.232.0/22
IP: 2a00:e5c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:97:ac:48:b6:00:22:a2:09:3f:56:d3:a5:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98a533308740bbbd217bf69dce90b3f541208457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:8d:bd:64:c2:34:5f:83:14:7e:eb:44:0f:
d6:f0:db:6d:bd:e9:15:dc:0e:86:b6:8c:a4:dc:2e:
94:27:b4:01:30:69:13:26:4f:1d:33:06:24:ce:9b:
e3:61:8c:64:6f:aa:47:8e:25:0f:d0:cc:58:72:a1:
24:0c:d8:1b:d1:67:d5:41:d7:84:31:9e:f3:82:85:
db:1f:b2:06:84:89:8e:6b:6a:34:57:a2:f2:5e:e0:
5a:ac:00:31:e8:a7:61:c7:d5:61:fc:79:e9:62:94:
37:a3:0c:ce:d1:fd:87:06:27:9c:98:4f:46:00:ed:
9b:55:37:aa:c9:9f:dc:86:62:c5:01:85:dd:7d:13:
88:f2:63:b2:71:84:f3:44:e8:b1:ae:b1:0b:0d:a8:
70:93:62:79:98:ee:98:0e:25:9d:5e:0e:7c:36:d5:
d2:6a:f8:6b:93:54:90:77:64:d7:be:22:d4:bd:96:
7b:c8:79:68:1d:92:37:23:a3:a8:5c:0e:aa:57:a6:
58:9e:b4:06:22:39:1a:20:f7:ab:73:1c:30:ac:4b:
a2:c3:7d:cd:e2:39:dc:6b:38:2d:62:b5:f5:b5:59:
43:b7:36:5f:4f:e8:be:23:f8:da:0a:02:d5:cf:ce:
2b:87:8e:9c:25:fc:05:20:07:9f:23:50:c8:11:30:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
IPv6:
2a00:e5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51557
Signature Algorithm: sha256WithRSAEncryption
98:ee:52:1e:d4:0d:60:e9:3b:e7:58:7d:6e:60:6c:c9:de:66:
75:94:cc:77:9b:50:5a:85:2f:f0:07:57:02:cb:86:99:41:56:
0b:0a:0b:47:c5:3c:fb:01:4c:42:91:c3:b2:2e:0c:e4:6e:ba:
bc:5d:5d:7a:e9:59:d4:13:48:50:fe:dc:92:fd:f5:d1:e5:d6:
76:a7:f5:02:43:f5:fa:57:96:3c:11:93:3f:95:c2:53:82:b2:
aa:e5:cd:0f:9b:49:8a:bf:64:df:5f:86:64:b3:e5:c5:6c:6e:
a4:4a:28:9d:c9:b3:ab:29:f5:42:98:0b:09:80:99:0d:79:94:
d6:fd:f3:7d:f4:4a:13:46:de:ec:ed:1a:bd:03:67:c2:ef:d9:
77:4a:90:5b:4d:69:c1:12:ce:40:1b:19:a2:dd:46:a9:49:be:
6c:20:b3:65:56:33:ec:56:48:c2:cd:83:f4:61:c5:e9:f2:f9:
9a:0a:37:c4:20:af:6a:89:a3:37:10:eb:29:a3:03:8c:bf:84:
13:2f:11:cf:32:23:0d:93:44:ea:0d:42:36:18:bc:bd:e7:43:
a7:09:f8:51:96:ba:ec:16:7b:d0:42:81:9d:bf:73:82:f5:46:
ff:68:d9:e4:4d:4b:a4:7c:42:cc:59:c6:1f:77:23:29:1e:c4:
42:f3:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:56:36 2024 by rpki-client on console-fra.rpki-client.org