Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer (raw, json)
Hash identifier: snZl+Ue7gXST1g8q3sUbrZOtH49TNn2hfuoIG/ZZIlc=
Subject key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010C4845F9A336D902F2F576400138
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211529
IP: 2001:67c:14ac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0c:48:45:f9:a3:36:d9:02:f2:f5:76:40:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9928b812e2e9f472eec7d233f604af263e850f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:7b:ea:52:e3:93:61:c2:d7:34:fd:fd:3b:
f7:76:73:3c:97:7b:3d:6b:05:34:bf:b9:f4:cc:da:
27:09:74:0b:11:6a:0a:03:96:91:41:70:3b:e1:eb:
9f:38:b7:e2:c5:3f:77:e3:c1:39:f2:f4:03:72:72:
59:37:74:f8:c8:0c:1a:6e:bf:a7:18:21:b2:2c:7d:
96:90:a1:a5:c1:29:44:2e:21:02:59:37:c0:4c:1c:
3b:df:02:b2:83:07:79:ed:3a:15:dd:97:41:93:d1:
2e:7c:b7:8d:15:70:83:e2:ec:7a:19:99:6a:2c:f3:
42:ae:dc:a8:fd:e9:be:dd:4c:30:6d:8f:c2:cb:9e:
e9:cc:f1:bf:05:23:73:29:0f:d7:20:de:ff:4c:db:
5b:a2:b9:8e:4b:48:91:1b:50:e6:15:b3:65:ca:ba:
a0:c6:d0:3d:2e:4e:f4:4c:c8:b4:9a:be:1d:53:cd:
45:28:59:92:f6:d7:00:f0:aa:cc:5a:08:e2:b8:2c:
fc:1b:3d:95:4b:5a:80:77:55:87:5c:54:79:ea:f3:
1d:a7:5f:93:3b:6a:8d:da:cb:ee:01:cf:02:c1:fe:
7d:8f:33:79:71:93:0d:6e:0e:2d:30:04:d9:85:b0:
eb:43:b0:ab:cf:14:f3:61:e2:39:e8:40:c9:07:49:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14ac::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211529
Signature Algorithm: sha256WithRSAEncryption
5e:ff:9f:c4:b1:f2:43:38:b4:f9:43:00:8a:6d:6c:3e:61:72:
2f:27:5f:9d:42:d3:77:e2:0d:0c:00:ce:45:07:07:e4:a6:ca:
12:49:b5:9a:05:40:aa:09:0d:76:fd:e6:1e:14:c0:8f:69:34:
8b:b0:f2:af:78:9a:cd:3e:32:ae:e4:02:cf:14:53:60:76:fa:
65:53:50:aa:99:51:6e:ea:b9:0a:93:a3:0e:e8:09:57:b7:29:
a2:2c:9b:7f:e2:f8:29:3e:93:29:c7:76:c4:56:26:13:a7:79:
04:af:1b:0a:72:38:cb:e0:0e:21:c3:11:56:72:b6:5d:5d:aa:
e1:1f:56:db:1f:29:a1:fa:fb:ce:8b:3e:6e:40:be:5a:b4:05:
90:fd:ad:e3:23:63:db:c3:dc:ed:5e:61:af:3f:f6:63:3a:cf:
8c:1d:e4:c9:e0:1c:58:4a:f6:a3:e0:59:e6:8c:52:54:3c:14:
c7:cc:00:d7:0c:36:a5:a2:92:72:5c:cb:ec:06:19:b7:47:1f:
c7:ea:f6:ae:14:4f:4c:21:78:6d:23:84:9b:96:b8:31:67:dc:
18:08:c0:91:61:14:9b:e2:55:0c:65:de:46:38:4a:ec:59:0c:
59:1f:c8:90:02:bd:c8:0f:bd:ce:5e:09:f7:b2:79:d5:aa:ce:
10:27:af:4e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzFAQxIRfmjNtkC8vV2QAE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTI4YjgxMmUyZTlmNDcyZWVjN2QyMzNmNjA0YWYyNjNlODUwZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU176lLjk2HC1zT9/Tv3dnM8l3s9
awU0v7n0zNonCXQLEWoKA5aRQXA74eufOLfixT9348E58vQDcnJZN3T4yAwabr+n
GCGyLH2WkKGlwSlELiECWTfATBw73wKygwd57ToV3ZdBk9EufLeNFXCD4ux6GZlq
LPNCrtyo/em+3UwwbY/Cy57pzPG/BSNzKQ/XIN7/TNtbormOS0iRG1DmFbNlyrqg
xtA9Lk70TMi0mr4dU81FKFmS9tcA8KrMWgjiuCz8Gz2VS1qAd1WHXFR56vMdp1+T
O2qN2svuAc8Cwf59jzN5cZMNbg4tMATZhbDrQ7CrzxTzYeI56EDJB0mPHwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFJkouBLi6fRy7sfSM/YEryY+hQ8xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzJkOTky
OS00ZWZmLTQ3OTgtYTUzOC1jMDE4YmQ3ZWQ0ODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmQ5OTI5
LTRlZmYtNDc5OC1hNTM4LWMwMThiZDdlZDQ4MC8xL21TaTRFdUxwOUhMdXg5SXo5
Z1N2Smo2RkR6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBSsMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM6STANBgkqhkiG9w0BAQsFAAOCAQEAXv+fxLHyQzi0+UMAim1sPmFyLydf
nULTd+INDADORQcH5KbKEkm1mgVAqgkNdv3mHhTAj2k0i7Dyr3iazT4yruQCzxRT
YHb6ZVNQqplRbuq5CpOjDugJV7cpoiybf+L4KT6TKcd2xFYmE6d5BK8bCnI4y+AO
IcMRVnK2XV2q4R9W2x8pofr7zos+bkC+WrQFkP2t4yNj28Pc7V5hrz/2YzrPjB3k
yeAcWEr2o+BZ5oxSVDwUx8wA1ww2paKSclzL7AYZt0cfx+r2rhRPTCF4bSOEm5a4
MWfcGAjAkWEUm+JVDGXeRjhK7FkMWR/IkAK9yA+9zl4J97J51arOECevTg==
-----END CERTIFICATE-----
Generated at Fri May 3 10:56:43 2024 by rpki-client on console-fra.rpki-client.org