Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
File: mWpflIQ1rLESpm4lY3kiY-yLZX4.cer (raw, json)
Hash identifier: mzpHq3RoXWj/l/SpIAMJbJLGoYO6fNiMqh5a021MyBE=
Subject key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2933EDDC62C706D739FC544B61FE45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203616
IP: 185.129.80.0/22
IP: 2a06:d400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:33:ed:dc:62:c7:06:d7:39:fc:54:4b:61:fe:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996a5f948435acb112a66e2563792263ec8b657e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:70:29:c0:57:9a:34:24:2d:a7:35:b4:33:
59:b0:b5:bc:a3:c0:56:5f:63:a0:32:70:ab:93:fd:
d6:64:ec:62:de:9c:0f:1b:d6:c7:08:9d:e4:15:e2:
4b:06:8c:93:37:52:80:fc:93:a2:4c:2a:ce:3f:ae:
13:59:0a:b2:e4:5d:db:1d:4f:5b:e4:1f:07:d7:c1:
99:b5:c5:12:17:6b:1d:69:c1:29:4d:49:ac:b1:c0:
23:ad:6a:05:16:7d:78:7c:02:8d:60:d3:11:9f:9b:
6b:ac:60:96:79:2a:c6:12:60:e3:93:59:5d:d1:93:
75:b1:1a:1d:62:f0:97:06:04:d8:64:a6:a5:94:f2:
79:36:01:fc:b3:05:40:bc:ff:0f:92:c6:f3:af:03:
b9:3c:aa:69:5d:3c:16:6c:25:03:71:03:73:5c:ab:
ed:97:cf:ff:30:c0:a1:28:0d:13:ae:04:fc:90:db:
45:64:d4:63:67:71:68:2a:c8:63:f4:b7:f9:ef:ae:
25:4e:75:ce:ef:80:72:df:71:33:3a:03:d4:52:43:
8d:8e:f5:af:bb:4a:32:60:13:9c:4a:0a:16:e0:82:
1d:31:28:95:75:d7:5e:7c:8a:61:8a:08:ed:7b:15:
77:c0:04:70:4c:9c:95:78:2d:e7:d9:d5:29:26:cd:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.80.0/22
IPv6:
2a06:d400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203616
Signature Algorithm: sha256WithRSAEncryption
42:22:7d:74:83:1d:78:58:7e:4f:90:57:54:70:10:b6:34:19:
57:ac:59:c6:92:f0:49:22:83:9e:98:37:a3:bf:0b:fb:13:f1:
3a:d6:82:ac:60:eb:a2:02:97:ec:d5:5b:09:a9:57:3f:b8:57:
2f:f4:81:60:4f:f9:b1:f8:23:b8:1f:d8:5f:0b:f5:89:23:c3:
4a:69:8a:57:a4:00:46:85:6f:45:a6:68:13:da:c5:8e:a4:51:
2a:4f:51:ad:aa:38:c2:6e:36:91:a0:17:7d:4e:19:54:60:2a:
f5:07:84:3a:91:45:c7:84:90:e0:51:cc:b8:0c:0e:0d:af:7a:
47:01:7e:18:11:e6:68:14:8b:04:d1:f8:01:2a:91:c3:57:7f:
fc:5f:57:69:e5:03:76:58:18:11:02:8b:e5:cf:4d:a6:28:4f:
8b:75:98:da:46:f8:88:a6:bb:d5:e4:22:f8:28:85:8b:5a:e1:
43:c8:f0:ce:a3:ff:27:4d:db:cf:ef:de:ef:f6:df:54:97:a2:
2f:d5:73:0f:c0:c0:ba:3a:72:82:65:03:71:8c:17:21:50:ff:
51:3e:e3:f7:5d:09:f7:39:d1:de:d2:a7:41:fd:1f:d7:a7:87:
0e:7e:f2:71:8d:1a:bd:d5:8f:ec:92:0a:b4:16:f1:6f:64:43:
0d:c2:c4:fa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKTPt3GLHBtc5/FRLYf5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZhNWY5NDg0MzVhY2IxMTJhNjZlMjU2Mzc5MjI2M2VjOGI2NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsxwKcBXmjQkLac1tDNZsLW8o8BW
X2OgMnCrk/3WZOxi3pwPG9bHCJ3kFeJLBoyTN1KA/JOiTCrOP64TWQqy5F3bHU9b
5B8H18GZtcUSF2sdacEpTUmsscAjrWoFFn14fAKNYNMRn5trrGCWeSrGEmDjk1ld
0ZN1sRodYvCXBgTYZKallPJ5NgH8swVAvP8PksbzrwO5PKppXTwWbCUDcQNzXKvt
l8//MMChKA0TrgT8kNtFZNRjZ3FoKshj9Lf5764lTnXO74By33EzOgPUUkONjvWv
u0oyYBOcSgoW4IIdMSiVdddefIphigjtexV3wARwTJyVeC3n2dUpJs1gUwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJlqX5SENayxEqZuJWN5ImPsi2V+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2ViMGZl
YS1iMGRiLTQ4ODYtYmEwZC02N2M3OTZhYTk3ZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZWIwZmVh
LWIwZGItNDg4Ni1iYTBkLTY3Yzc5NmFhOTdlOS8xL21XcGZsSVExckxFU3BtNGxZ
M2tpWS15TFpYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYFQMA0EAgACMAcDBQMqBtQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbYDANBgkqhkiG9w0BAQsFAAOCAQEAQiJ9dIMdeFh+
T5BXVHAQtjQZV6xZxpLwSSKDnpg3o78L+xPxOtaCrGDrogKX7NVbCalXP7hXL/SB
YE/5sfgjuB/YXwv1iSPDSmmKV6QARoVvRaZoE9rFjqRRKk9Rrao4wm42kaAXfU4Z
VGAq9QeEOpFFx4SQ4FHMuAwODa96RwF+GBHmaBSLBNH4ASqRw1d//F9XaeUDdlgY
EQKL5c9NpihPi3WY2kb4iKa71eQi+CiFi1rhQ8jwzqP/J03bz+/e7/bfVJeiL9Vz
D8DAujpygmUDcYwXIVD/UT7j910J9znR3tKnQf0f16eHDn7ycY0avdWP7JIKtBbx
b2RDDcLE+g==
-----END CERTIFICATE-----
Generated at Fri May 3 07:28:31 2024 by rpki-client on console-ams.rpki-client.org