Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
File: TEaPGBJltNlsooNaPlcMJnkDXf8.cer (raw, json)
Hash identifier: y3ywwPkhsQeJzkbCG/a+dqguMYdIbKGb7MCgTj4t/Po=
Subject key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A027C70666FA1F5376A7CE916D8A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208708
IP: 45.87.112.0/22
IP: 2a10:8d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:02:7c:70:66:6f:a1:f5:37:6a:7c:e9:16:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c468f181265b4d96ca2835a3e570c2679035dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:1a:08:40:0e:36:ea:01:5d:8f:ef:6e:b2:
b3:f6:31:06:05:ec:2d:3c:d0:ca:3b:48:68:d2:0f:
6a:3e:ca:ad:80:8f:a1:25:70:cb:17:dd:cb:69:b5:
7d:90:0e:f9:b1:80:5a:be:42:41:57:52:73:6e:2f:
fb:44:a2:32:37:91:ea:0b:2e:c2:59:d7:df:84:c6:
a4:9d:b2:84:15:9a:a1:7d:cf:3c:e2:ed:d2:5f:a4:
25:4f:f6:be:d7:7d:8f:97:4d:a2:d4:f5:86:bd:c0:
df:93:f9:e5:8b:e6:c9:0f:a2:56:99:90:0b:33:35:
04:68:79:52:a3:85:c1:61:79:43:0d:c7:80:5b:2e:
da:0a:5f:d7:47:35:47:c7:2b:69:ad:2c:70:26:cb:
e8:f3:c2:95:65:9e:86:0a:87:a3:a5:bc:3c:71:df:
d2:f7:a0:1e:71:bd:e9:8f:cf:4d:7b:26:7e:60:62:
6b:28:84:33:34:ca:43:6c:c5:47:07:02:42:6f:5f:
78:5c:e0:49:1f:1b:3b:df:77:d4:05:c3:2e:3f:7c:
06:f4:78:26:f3:71:4e:10:65:f8:39:2a:49:4b:19:
ed:f8:c1:97:61:34:76:92:9c:90:66:8e:85:85:03:
b8:51:d3:ae:d2:61:97:d9:a4:57:24:01:4d:5a:51:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.112.0/22
IPv6:
2a10:8d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208708
Signature Algorithm: sha256WithRSAEncryption
81:6b:de:95:ec:0a:95:f5:7d:47:ea:36:27:93:17:10:1f:77:
56:db:45:8a:2c:f8:f9:53:1b:94:6b:87:7f:a8:b2:5c:21:66:
db:a9:35:7b:24:e2:0a:76:85:d1:ce:c8:c4:d7:b8:19:47:f8:
47:55:cb:f9:df:80:62:a3:d4:53:5a:ee:9f:e7:b3:94:de:96:
0a:ad:13:ed:df:ef:84:8f:24:10:a4:ce:34:5b:f1:cf:b0:b2:
b9:d2:2e:b6:9d:19:09:6a:76:4e:69:8f:b9:9e:9c:c3:b9:96:
bb:39:01:22:e2:7f:ef:12:fe:c9:86:5d:3b:7e:8b:4f:23:b6:
5b:22:fa:8e:c1:11:c0:e7:a9:db:60:7f:83:de:53:e0:eb:05:
dc:9c:c0:e3:c7:29:87:c3:64:d4:21:03:b0:84:14:b8:d2:b7:
24:93:84:ba:18:e9:93:09:47:57:10:7e:47:c7:9e:ec:70:c4:
f5:0f:19:69:c4:95:b0:47:fa:65:a5:c1:35:b4:38:07:81:64:
49:a5:01:a5:1e:09:17:3e:1a:7c:43:c1:e6:af:b0:8f:0f:b6:
d4:9f:30:d7:3d:f0:87:15:5c:82:47:76:ab:61:99:82:0a:b7:
fa:35:7d:f6:dd:43:05:80:1e:89:09:f3:1b:60:58:43:de:0e:
64:31:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:55 2024 by rpki-client on console-ams.rpki-client.org