Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer
File: rmVFghpphUC8UCXwPnSG80o4yYM.cer (raw, json)
Hash identifier: YXMTTFv5LMnBknZjREBk+i6CuJtmhpTMvc3u5V1gN5k=
Subject key identifier: AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC64ED4042804A26E6FDEBAFBED11C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34603
IP: 194.116.238.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:64:ed:40:42:80:4a:26:e6:fd:eb:af:be:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae6545821a698540bc5025f03e7486f34a38c983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:d1:f0:c4:94:64:72:c0:16:cf:a7:2a:33:
e1:d9:35:b8:b0:78:20:f5:d6:0d:d3:93:61:b7:57:
16:d3:01:55:40:03:79:e8:b3:7d:b9:17:fa:35:bb:
a7:68:bf:f5:fd:06:f4:e7:a1:8a:44:f9:67:cf:aa:
2b:43:0e:ff:0c:b3:0c:44:cc:75:b3:ee:fc:ac:f9:
46:5f:19:59:30:d4:1d:b7:e5:37:5e:77:97:5c:d1:
26:9e:01:7d:ed:06:df:65:57:71:35:b4:4a:6a:bb:
1e:80:c0:8f:80:f1:31:c8:64:2f:0a:8e:33:85:57:
e6:d6:c5:6e:ee:6e:32:f0:3d:be:cf:26:d9:f0:e7:
97:af:2c:c8:47:ec:84:b4:36:59:a8:41:6d:3f:1e:
ee:08:2f:0b:60:92:3d:bb:80:78:87:48:00:84:bf:
f4:db:a0:df:f6:4c:91:79:b6:0d:92:83:fa:c3:b0:
cf:22:48:d5:43:b2:b0:3d:bf:8a:ab:1b:27:42:de:
3d:34:ed:fb:06:5e:b2:89:b7:a7:95:1c:d0:95:bf:
6e:fc:fc:9a:7e:32:1f:91:b0:eb:d3:1c:8f:63:6e:
d2:af:1a:c7:c7:b7:d5:fd:9b:43:16:bf:2a:e4:ec:
80:61:3b:62:5e:9e:c8:e9:60:c0:43:d8:ff:fa:e7:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.238.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34603
Signature Algorithm: sha256WithRSAEncryption
5f:ae:9f:89:3a:a1:1b:fe:75:df:6e:e0:dd:c3:cd:0b:7f:c5:
d6:d7:b6:d0:1e:29:e6:c7:87:63:18:21:98:b1:8e:88:02:aa:
49:d3:4d:34:02:88:29:c5:32:22:d3:0a:4e:71:71:af:eb:78:
6c:8c:7c:4a:a7:5a:e5:87:dd:76:78:6d:a8:f7:e3:8b:62:0c:
1b:a2:0e:93:f2:fd:98:a3:37:d3:4d:7b:d2:e2:15:ab:a5:0a:
b5:d0:2d:33:7b:1a:f9:55:a4:48:e1:f7:bf:15:6f:fa:a0:66:
a1:d3:18:31:a5:3b:2c:4c:5c:2c:5e:77:ed:a6:48:33:ae:b7:
f7:70:a4:4c:7e:cd:4c:28:0c:a7:ef:2d:ed:2b:8b:fb:d7:fb:
c0:a0:a5:68:af:e9:c4:70:0f:76:d7:ad:d1:17:e2:40:10:66:
6a:01:60:f0:77:e3:9f:b1:e9:7b:f4:78:89:be:c7:cf:44:5d:
6d:7c:c4:76:bb:c4:cd:b3:ec:e4:d9:21:68:c1:5e:62:30:76:
30:a5:be:34:40:65:78:dd:cf:48:f0:e3:89:b5:d5:db:0b:9b:
86:a9:e3:e8:5f:5d:0b:31:1c:4f:4c:ea:f0:a7:cd:2b:6a:80:
68:cc:54:56:08:2f:8a:2c:1e:4f:2d:8e:13:c9:b8:b8:1e:65:
7e:ed:d3:12
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzF3GTtQEKASibm/euvvtEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTY1NDU4MjFhNjk4NTQwYmM1MDI1ZjAzZTc0ODZmMzRhMzhjOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOjR8MSUZHLAFs+nKjPh2TW4sHgg
9dYN05Nht1cW0wFVQAN56LN9uRf6NbunaL/1/Qb056GKRPlnz6orQw7/DLMMRMx1
s+78rPlGXxlZMNQdt+U3XneXXNEmngF97QbfZVdxNbRKarsegMCPgPExyGQvCo4z
hVfm1sVu7m4y8D2+zybZ8OeXryzIR+yEtDZZqEFtPx7uCC8LYJI9u4B4h0gAhL/0
26Df9kyRebYNkoP6w7DPIkjVQ7KwPb+KqxsnQt49NO37Bl6yibenlRzQlb9u/Pya
fjIfkbDr0xyPY27SrxrHx7fV/ZtDFr8q5OyAYTtiXp7I6WDAQ9j/+ufPsQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFK5lRYIaaYVAvFAl8D50hvNKOMmDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2RmMmE0
NS04M2QzLTQ1MDMtYWVmNi05ZGE5ZTdlZDMyMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZGYyYTQ1
LTgzZDMtNDUwMy1hZWY2LTlkYTllN2VkMzIzNi8xL3JtVkZnaHBwaFVDOFVDWHdQ
blNHODBvNHlZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwnTuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCHKzANBgkqhkiG9w0BAQsFAAOCAQEAX66fiTqhG/51327g3cPNC3/F1te20B4p
5seHYxghmLGOiAKqSdNNNAKIKcUyItMKTnFxr+t4bIx8Sqda5YfddnhtqPfji2IM
G6IOk/L9mKM300170uIVq6UKtdAtM3sa+VWkSOH3vxVv+qBmodMYMaU7LExcLF53
7aZIM66393CkTH7NTCgMp+8t7SuL+9f7wKClaK/pxHAPdtet0RfiQBBmagFg8Hfj
n7Hpe/R4ib7Hz0RdbXzEdrvEzbPs5NkhaMFeYjB2MKW+NEBleN3PSPDjibXV2wub
hqnj6F9dCzEcT0zq8KfNK2qAaMxUVggviiweTy2OE8m4uB5lfu3TEg==
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:56 2024 by rpki-client on console-fra.rpki-client.org