Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
File: RtcTrajavPd2gcDKQtmWnkR8jqc.cer (raw, json)
Hash identifier: ktrM62PPLc1JnTzxcGiM5cZxxnJuYbPohEAsilH2lS0=
Subject key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8013BB3766F15D442932CF8C494ABB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39673
AS: 205036
IP: 91.209.40.0/24
IP: 91.209.48.0/24
IP: 91.209.50.0/24
IP: 91.209.58.0/24
IP: 2a0f:5fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3b:b3:76:6f:15:d4:42:93:2c:f8:c4:94:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:35:7f:95:36:ab:c4:de:0a:1e:c3:7a:7e:
97:59:7b:e0:ff:cf:bb:60:e3:06:60:2d:7b:32:71:
a6:f3:38:d8:7c:bf:7c:c2:dd:94:fa:01:f6:6f:61:
43:05:8d:46:4c:ec:01:cb:22:b8:ad:4a:69:f2:ac:
7b:e1:37:c2:8a:41:d6:91:09:14:06:f3:ae:c8:e0:
93:08:5e:68:b3:fe:de:2d:78:fa:c4:ce:8c:69:45:
33:b0:2e:f8:40:1e:13:49:fe:c5:f4:77:b3:4a:e6:
bd:6e:04:2b:89:e7:c3:8b:bf:ed:a1:3f:ba:05:7e:
e2:f6:ad:83:8c:76:55:5f:6c:3b:9d:b1:92:86:04:
a3:9d:4d:b9:0a:76:ee:0b:f5:25:ad:c8:fb:0e:29:
d7:af:0e:72:8c:f5:6c:bd:0c:8f:6c:97:3a:d5:b5:
38:7d:34:69:d7:4f:25:c3:0e:50:9c:8e:5a:74:1e:
32:37:1e:f6:b0:e0:ee:7a:2a:87:ad:ec:72:5c:1e:
7e:8f:21:1f:3d:33:e8:26:44:24:ab:aa:70:d4:b6:
25:c4:8c:e9:18:43:df:35:b2:ad:0c:c7:85:26:cb:
fb:32:6b:15:2d:d7:5b:4d:73:26:24:00:cf:91:39:
94:4a:f1:ce:12:96:62:26:bb:82:b7:5a:02:1a:64:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
91.209.48.0/24
91.209.50.0/24
91.209.58.0/24
IPv6:
2a0f:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39673
205036
Signature Algorithm: sha256WithRSAEncryption
3e:90:ac:15:aa:8c:d5:65:4a:2b:14:8a:3a:4a:76:54:7d:df:
3e:79:53:45:8d:99:77:5c:fd:31:0d:44:17:a9:f8:4b:7c:c2:
ef:6b:db:40:e2:2e:8b:2f:b6:3e:22:36:34:5d:b2:46:f1:2d:
b9:28:f9:19:a5:b9:55:a4:04:db:17:2f:e5:a3:fe:b2:62:b5:
ea:26:5d:b6:36:05:55:3f:a0:25:e9:bc:2f:b7:eb:9a:b3:06:
8d:bb:2d:d5:f5:b3:a5:d0:fc:bb:3f:40:ba:ee:f4:74:db:6f:
93:d5:eb:ce:4c:8a:c3:b9:70:90:51:9d:6f:7d:39:6a:1c:81:
42:e9:55:2e:60:18:f7:94:28:12:48:5f:cb:9c:31:8d:54:da:
58:f2:db:17:43:9a:6d:68:ee:fa:36:9d:cc:8d:f6:bc:da:a1:
b4:f2:4b:37:91:ba:f3:79:f2:00:f0:db:c7:28:8d:3f:f5:8a:
78:3e:f9:ec:c7:e9:a8:95:36:43:1e:e8:c4:84:ee:1e:4b:c9:
f6:06:52:63:dc:63:25:10:f1:e1:a2:7d:08:60:fc:8f:ab:cd:
3c:b6:1c:a7:3a:06:78:3c:ed:2d:91:c3:59:13:9d:9e:26:f4:
81:c4:1f:09:51:f2:60:66:d3:3b:75:0f:b4:dd:79:1c:66:f1:
8d:02:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:12 2024 by rpki-client on console-fra.rpki-client.org