Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMZmEU8O4Hbj0dKv2jx_05D7Auc.cer
File: rMZmEU8O4Hbj0dKv2jx_05D7Auc.cer (raw, json)
Hash identifier: n/qixV3rQkC5DhKm2gwscmuRdu1GwW3nnKG6WLQ5vYg=
Subject key identifier: AC:C6:66:11:4F:0E:E0:76:E3:D1:D2:AF:DA:3C:7F:D3:90:FB:02:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794F689500662BF65D5E67F316EA114
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/0682b5-9564-4130-8609-3fd4ff546c33/1/rMZmEU8O4Hbj0dKv2jx_05D7Auc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/0682b5-9564-4130-8609-3fd4ff546c33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202047
AS: 209359
IP: 85.208.140.0/22
IP: 194.169.184.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f6:89:50:06:62:bf:65:d5:e6:7f:31:6e:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc666114f0ee076e3d1d2afda3c7fd390fb02e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:ae:29:73:ae:9f:fe:8a:db:10:6f:8c:9d:
6e:e3:a3:cd:a2:71:f0:67:70:36:d5:1f:e2:a8:26:
7e:12:2b:37:d7:1c:7f:f4:0e:94:91:09:70:e1:f9:
64:00:1e:f0:b9:7d:50:3e:49:fb:6b:a3:6e:c5:40:
08:00:93:df:7c:63:28:4c:98:5f:20:92:f0:14:ca:
11:3d:0a:dc:61:2a:73:0b:e4:4e:ba:19:c4:30:ec:
36:17:53:cf:ae:93:65:46:b5:0b:06:e0:15:8e:be:
a8:a7:49:95:ce:0e:40:a6:fc:bc:61:46:1e:d8:c3:
12:d0:1d:cc:22:95:a8:b1:e0:f5:7c:61:4d:2a:05:
3e:c7:55:9f:74:3e:37:3b:4a:c4:e0:1c:3e:7d:70:
82:43:4e:63:29:d3:5b:90:08:89:cc:7a:4e:fd:09:
5d:63:fd:50:3b:da:a1:09:13:1d:82:ea:8b:35:ea:
d6:4f:9c:a8:96:ae:bf:4c:c3:0a:9c:77:df:c5:e4:
c9:59:be:1c:b3:38:0b:5a:dd:68:58:59:42:9d:1f:
09:9b:38:32:c4:e1:56:fa:d1:77:33:04:22:98:ec:
3c:b2:6b:8b:b1:69:00:90:ee:0a:42:0b:64:e4:71:
e2:89:15:e8:7f:b1:3e:a1:e8:d6:bd:9c:1a:bb:ee:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:66:11:4F:0E:E0:76:E3:D1:D2:AF:DA:3C:7F:D3:90:FB:02:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0682b5-9564-4130-8609-3fd4ff546c33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0682b5-9564-4130-8609-3fd4ff546c33/1/rMZmEU8O4Hbj0dKv2jx_05D7Auc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.140.0/22
194.169.184.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202047
209359
Signature Algorithm: sha256WithRSAEncryption
57:dd:78:59:f8:86:4f:7d:b8:ae:b9:2e:05:8e:b2:50:b0:ea:
39:a4:08:92:48:1f:40:5d:f2:cb:84:9e:c8:88:2e:cf:4f:d2:
54:e2:08:44:9e:30:2a:20:db:58:a1:ec:73:90:fd:d3:4a:44:
b3:21:98:0d:30:fe:d5:9a:15:db:5a:be:45:16:50:3e:fb:17:
21:ba:fd:81:3c:8b:90:37:04:27:95:ae:c3:11:91:7c:84:e7:
6e:f1:db:cc:ad:67:ba:d5:38:dc:12:2b:aa:bc:05:f6:6e:29:
52:57:48:41:10:48:4f:be:31:1f:b6:c0:af:18:11:fa:28:48:
0e:a2:6b:43:4a:b3:de:fb:e7:44:34:ab:2c:39:ec:91:84:f6:
84:31:fa:a3:62:1a:4b:54:ba:ae:0c:d4:e2:38:73:4d:40:60:
7f:5a:f4:dd:85:87:c1:b5:fd:ed:a1:59:26:c6:fb:e0:fc:62:
67:e5:09:81:86:e4:8c:c1:09:0b:f8:24:0d:72:b7:58:ac:e4:
a7:f0:4e:d0:26:9f:0b:ec:de:df:d3:14:00:31:a5:fe:6f:a2:
e1:2c:70:92:48:18:9a:f1:c5:3b:03:c9:c7:31:a7:1a:ac:a6:
e7:e7:da:e5:83:87:60:8b:dc:23:8b:38:bb:06:f3:dc:f6:60:
c2:8e:15:09
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAYzHlPaJUAZiv2XV5n8xbqEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2M2NjYxMTRmMGVlMDc2ZTNkMWQyYWZkYTNjN2ZkMzkwZmIwMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+euKXOun/6K2xBvjJ1u46PNonHw
Z3A21R/iqCZ+Eis31xx/9A6UkQlw4flkAB7wuX1QPkn7a6NuxUAIAJPffGMoTJhf
IJLwFMoRPQrcYSpzC+ROuhnEMOw2F1PPrpNlRrULBuAVjr6op0mVzg5Apvy8YUYe
2MMS0B3MIpWoseD1fGFNKgU+x1WfdD43O0rE4Bw+fXCCQ05jKdNbkAiJzHpO/Qld
Y/1QO9qhCRMdguqLNerWT5yolq6/TMMKnHffxeTJWb4cszgLWt1oWFlCnR8Jmzgy
xOFW+tF3MwQimOw8smuLsWkAkO4KQgtk5HHiiRXof7E+oejWvZwau+7u+wIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFKzGZhFPDuB249HSr9o8f9OQ+wLnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzA2ODJi
NS05NTY0LTQxMzAtODYwOS0zZmQ0ZmY1NDZjMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMDY4MmI1
LTk1NjQtNDEzMC04NjA5LTNmZDRmZjU0NmMzMy8xL3JNWm1FVThPNEhiajBkS3Yy
anhfMDVEN0F1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCVdCMAwQCwqm4MB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwMVPwIDAzHPMA0GCSqGSIb3DQEBCwUAA4IBAQBX3XhZ+IZPfbiuuS4F
jrJQsOo5pAiSSB9AXfLLhJ7IiC7PT9JU4ghEnjAqINtYoexzkP3TSkSzIZgNMP7V
mhXbWr5FFlA++xchuv2BPIuQNwQnla7DEZF8hOdu8dvMrWe61TjcEiuqvAX2bilS
V0hBEEhPvjEftsCvGBH6KEgOomtDSrPe++dENKssOeyRhPaEMfqjYhpLVLquDNTi
OHNNQGB/WvTdhYfBtf3toVkmxvvg/GJn5QmBhuSMwQkL+CQNcrdYrOSn8E7QJp8L
7N7f0xQAMaX+b6LhLHCSSBia8cU7A8nHMacarKbn59rlg4dgi9wjizi7BvPc9mDC
jhUJ
-----END CERTIFICATE-----
Generated at Fri May 3 09:38:31 2024 by rpki-client on console-ams.rpki-client.org