Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mNsa7qiL1J378h6tUukx1-Lp8UI.cer
File: mNsa7qiL1J378h6tUukx1-Lp8UI.cer (raw, json)
Hash identifier: 3lQcAVeMsZCtU06Dx6dr0Toyx2gO2prsPN8dBkL5O2w=
Subject key identifier: 98:DB:1A:EE:A8:8B:D4:9D:FB:F2:1E:AD:52:E9:31:D7:E2:E9:F1:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A6EA218BEFF4095ADC6D8CA14DF30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/9142c2-fbe8-4a6a-a755-76e868d615b7/1/mNsa7qiL1J378h6tUukx1-Lp8UI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/9142c2-fbe8-4a6a-a755-76e868d615b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216327
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:6e:a2:18:be:ff:40:95:ad:c6:d8:ca:14:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98db1aeea88bd49dfbf21ead52e931d7e2e9f142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:73:3a:1e:96:25:cf:4f:c8:22:69:ad:0a:
35:f1:c2:16:97:d0:f6:7e:a5:2b:67:d2:1e:79:62:
83:29:23:a5:45:b8:6e:6d:6e:92:0c:be:89:8a:65:
ef:a1:03:87:31:d2:41:a4:d1:27:9b:b1:1c:ca:4b:
1a:c8:96:8f:9e:ac:a9:fc:5f:ce:6c:00:fd:47:90:
2b:91:de:5f:0a:fa:f3:fb:38:fe:1a:5e:88:ba:7b:
93:9f:df:c9:ef:cc:63:3f:fd:2c:1c:3c:1d:38:05:
cb:b3:8c:30:71:08:c6:e0:e0:ba:32:9c:73:03:28:
b3:52:ef:7a:f8:09:ac:2a:30:49:24:1c:d7:f4:b4:
2b:c8:c8:aa:8c:01:40:18:f9:4b:fd:3b:8c:32:28:
5c:b9:3e:07:0c:c4:3c:7f:f1:07:0d:23:a7:25:c6:
53:fd:c0:ab:a3:61:3d:6a:1b:a2:49:5d:40:98:23:
e3:28:a3:c6:3d:38:60:bc:62:6b:f0:4e:0f:9b:08:
cb:4a:c9:20:ec:5c:0a:3f:72:96:13:ff:d0:be:59:
34:d6:b2:24:aa:8a:06:e5:be:24:ac:de:f5:0b:fd:
c8:40:57:4d:31:40:5f:95:e8:3f:de:01:ff:9b:5f:
09:ba:76:ce:0c:6b:52:ab:37:1c:55:e9:ca:fd:62:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:1A:EE:A8:8B:D4:9D:FB:F2:1E:AD:52:E9:31:D7:E2:E9:F1:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9142c2-fbe8-4a6a-a755-76e868d615b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9142c2-fbe8-4a6a-a755-76e868d615b7/1/mNsa7qiL1J378h6tUukx1-Lp8UI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216327
Signature Algorithm: sha256WithRSAEncryption
63:70:0b:70:0e:dc:8d:c6:e8:80:db:5b:b3:5f:6e:df:80:8d:
66:25:75:52:da:be:5e:21:18:fb:cc:34:ab:30:6a:05:8a:b7:
9f:0b:0d:b5:24:41:0e:04:9a:24:d6:c3:12:b8:a6:80:73:93:
83:f2:62:79:22:6d:b3:df:f5:9f:80:14:23:98:e2:62:e8:86:
f3:62:6c:7a:3c:d5:ba:23:f2:0f:5d:31:1f:6c:ca:ab:f4:2c:
88:ac:24:0a:09:d2:93:49:b9:d8:a9:c8:7c:c0:cc:57:1b:00:
b7:55:b0:ff:89:3e:79:1d:34:67:b7:1c:06:50:ab:e4:94:cb:
27:0d:84:cd:d9:cb:76:c2:89:a7:16:c2:6d:31:f4:aa:60:09:
02:fb:91:2a:d5:a3:68:09:7e:e5:cd:d9:0e:18:71:b4:f9:8a:
98:48:f2:42:11:19:1b:7a:94:8d:b8:bf:34:42:80:bc:3d:0c:
af:d2:30:36:83:e0:d8:67:04:3b:eb:4a:98:42:ab:a1:d5:41:
8c:73:2c:58:86:69:50:9c:ba:76:89:86:4e:79:0e:9f:1d:d7:
7e:7e:61:f7:b3:a5:da:94:da:8a:69:4e:d5:fe:fa:78:59:00:
b4:fb:19:5e:5b:e4:13:79:cd:3b:33:b4:5a:96:cc:ae:51:23:
3d:ec:63:aa
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzGSm6iGL7/QJWtxtjKFN8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRiMWFlZWE4OGJkNDlkZmJmMjFlYWQ1MmU5MzFkN2UyZTlmMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfdzOh6WJc9PyCJprQo18cIWl9D2
fqUrZ9IeeWKDKSOlRbhubW6SDL6JimXvoQOHMdJBpNEnm7EcyksayJaPnqyp/F/O
bAD9R5Arkd5fCvrz+zj+Gl6IunuTn9/J78xjP/0sHDwdOAXLs4wwcQjG4OC6Mpxz
AyizUu96+AmsKjBJJBzX9LQryMiqjAFAGPlL/TuMMihcuT4HDMQ8f/EHDSOnJcZT
/cCro2E9ahuiSV1AmCPjKKPGPThgvGJr8E4PmwjLSskg7FwKP3KWE//Qvlk01rIk
qooG5b4krN71C/3IQFdNMUBfleg/3gH/m18JunbODGtSqzccVenK/WIdswIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJjbGu6oi9Sd+/IerVLpMdfi6fFCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzkxNDJj
Mi1mYmU4LTRhNmEtYTc1NS03NmU4NjhkNjE1YjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvOTE0MmMy
LWZiZTgtNGE2YS1hNzU1LTc2ZTg2OGQ2MTViNy8xL21Oc2E3cWlMMUozNzhoNnRV
dWt4MS1McDhVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNNBzANBgkqhkiG9w0BAQsFAAOCAQEAY3ALcA7cjcbo
gNtbs19u34CNZiV1Utq+XiEY+8w0qzBqBYq3nwsNtSRBDgSaJNbDErimgHOTg/Ji
eSJts9/1n4AUI5jiYuiG82JsejzVuiPyD10xH2zKq/QsiKwkCgnSk0m52KnIfMDM
VxsAt1Ww/4k+eR00Z7ccBlCr5JTLJw2EzdnLdsKJpxbCbTH0qmAJAvuRKtWjaAl+
5c3ZDhhxtPmKmEjyQhEZG3qUjbi/NEKAvD0Mr9IwNoPg2GcEO+tKmEKrodVBjHMs
WIZpUJy6domGTnkOnx3Xfn5h97Ol2pTaimlO1f76eFkAtPsZXlvkE3nNOzO0WpbM
rlEjPexjqg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:28:27 2024 by rpki-client on console-ams.rpki-client.org