Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
File: TJETJOhpvEyl7IutDT3f9oVEGXk.cer (raw, json)
Hash identifier: FI7ExMovq9QzsOkqA4QMglB1kZ67uUmijSA0LNnUKbM=
Subject key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC0565C0C8F3F0269D27D77493D8CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24995
IP: 94.199.160.0/21
IP: 185.194.188.0/22
IP: 193.201.60.0/22
IP: 2a02:680::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:05:65:c0:c8:f3:f0:26:9d:27:d7:74:93:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:b6:e6:a8:e0:07:91:75:86:be:26:0a:6d:
62:1c:8b:12:e3:0d:37:b2:fc:7f:cc:41:5f:3c:b1:
33:66:34:68:48:d9:4d:f9:e9:e7:fd:a4:43:d8:d6:
6a:d0:ae:ce:e3:f9:8e:1d:bb:a5:29:d5:4f:c4:80:
91:5f:c8:51:5b:65:a0:b6:17:10:ef:3a:3f:14:69:
15:e4:8d:1c:31:11:41:23:62:58:b9:bb:ae:b4:2e:
b0:8e:3a:11:72:c7:78:67:c9:1b:ee:44:a4:df:5b:
81:da:42:23:1b:b1:e5:a9:a5:81:ae:ec:9e:2e:63:
3d:55:fe:9e:11:58:80:7d:5d:d0:f8:42:6a:8b:4e:
17:57:97:44:05:0f:70:a6:dd:a4:38:f6:80:27:70:
95:fd:d6:26:87:3b:49:90:e4:a7:9c:43:4c:70:3b:
a0:e5:83:3f:30:84:ef:2b:21:8f:3b:19:92:6c:7f:
8e:f7:43:a8:2c:d8:87:d9:4c:25:ff:5b:5d:ed:f3:
1c:8a:bd:36:8b:d4:09:f7:a5:5b:ae:ef:4e:c6:ce:
fc:3b:77:ed:59:7f:22:c0:59:4f:77:8c:5a:1b:69:
1a:7f:77:3f:3b:95:94:43:81:b6:df:2d:be:56:93:
63:dd:bc:a3:16:7d:26:25:39:e1:75:ee:6d:ed:bc:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.160.0/21
185.194.188.0/22
193.201.60.0/22
IPv6:
2a02:680::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24995
Signature Algorithm: sha256WithRSAEncryption
95:0d:6d:94:c1:5f:dc:85:aa:6a:da:8b:59:97:27:4f:14:d8:
8f:f3:3e:50:c0:f7:78:59:f1:0a:08:31:48:8d:f9:5d:70:a5:
5f:67:84:5e:5e:d6:1c:f4:1e:00:96:b1:26:1c:c6:9a:f1:2d:
21:bc:8f:4e:07:38:4a:3c:c2:49:54:c6:92:1d:62:8d:56:f9:
3a:1e:69:89:02:d7:e4:66:a7:4e:33:33:05:96:9c:c6:f4:70:
13:5c:c5:9d:b0:91:a9:11:72:9c:28:74:dd:4c:85:97:9d:07:
d7:9e:45:17:d2:5c:42:2b:9e:bd:f0:ad:0d:a7:bf:b9:4f:33:
82:81:1b:ff:ba:dc:d7:19:9b:78:15:76:47:15:d8:cb:bc:df:
14:e5:aa:50:06:10:35:84:61:62:5d:34:de:cc:9f:a0:e8:68:
f3:9f:83:2f:ed:29:c6:3d:4d:aa:24:13:db:95:47:33:4e:5c:
30:a5:f8:78:7e:e7:80:15:8e:3b:30:af:ed:44:c7:21:36:8d:
3f:2a:95:78:27:ea:9d:3f:ec:11:1b:5c:a2:b2:38:22:bb:a4:
72:94:51:bf:d7:3d:15:b6:8a:d9:e8:5c:84:66:2d:a0:65:22:
e8:1e:4d:4a:a5:60:99:4d:92:d9:ae:d0:bc:4f:83:6c:75:05:
a1:35:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:33 2024 by rpki-client on console-fra.rpki-client.org