Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.cer (raw, json)
Hash identifier: 4QP8MwrbKjI5qZ0Vy6Ycvw0uaXM0PBWeWYZQS/9FDBs=
Subject key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010EE968CF1413DC0A826F06202999
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.7.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0e:e9:68:cf:14:13:dc:0a:82:6f:06:20:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:96:4b:a3:90:4a:f7:e0:f6:89:1e:0d:eb:
b5:c8:55:e2:e6:e6:b9:49:7e:c7:d1:93:cc:8b:df:
7c:ba:16:b8:0b:00:50:0c:85:9d:8b:d0:bb:96:d2:
ef:15:27:88:4a:f0:ed:01:c3:58:9f:45:8f:13:23:
6f:95:88:b0:d0:93:73:b6:e8:59:e1:3d:ce:32:40:
6e:fc:29:8e:ed:93:fa:41:23:69:fa:24:f3:2f:56:
c2:7b:5e:59:54:b7:2d:75:08:37:62:56:ae:0b:fd:
1a:ae:68:c2:19:97:e9:52:16:1f:3a:3f:cb:60:49:
4a:6c:a0:bc:1f:47:54:51:28:ba:bc:8d:b1:c5:fc:
9a:78:eb:44:00:fa:31:19:1d:23:3e:94:db:18:e9:
21:31:0b:90:42:92:2e:07:43:73:17:eb:b3:f9:8b:
16:72:29:c6:86:29:b0:2a:e6:be:08:83:d6:26:ee:
fb:b4:46:aa:f5:de:6c:c3:16:58:dc:8b:ad:51:ce:
1d:62:41:4b:a6:20:e3:3e:ba:ef:19:ef:79:63:1e:
59:04:7b:cc:aa:b0:71:54:3e:fa:43:b2:e9:30:8b:
29:ca:2b:c5:50:df:38:50:8d:1b:e1:ce:a5:dd:85:
36:82:9f:51:ea:48:18:61:c4:d3:4e:fe:70:af:2f:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:d7:9a:bb:e2:98:ea:0e:ed:f4:4a:63:18:30:02:50:64:34:
e9:87:da:79:9b:00:5f:48:b8:3a:b3:d6:6c:df:bf:8a:33:46:
e8:e3:e5:2c:39:bc:21:b0:99:63:74:76:20:31:e1:e2:14:1f:
d7:10:60:27:ec:fe:1e:57:a0:fa:51:b9:37:e8:de:51:b1:0c:
b1:eb:52:fa:a7:24:9e:40:23:41:3c:3b:85:a0:a3:12:a3:59:
87:44:e5:2a:d8:32:c3:bd:77:36:03:bd:b5:3f:a3:0f:82:9f:
96:33:75:64:1b:b2:74:aa:8f:cd:6d:58:f4:9d:aa:37:34:3b:
4a:e7:6e:9d:26:04:79:8d:c8:ff:e4:7f:59:a3:3c:9c:fb:d0:
71:43:03:37:ca:f5:20:58:b7:3e:7e:63:13:72:86:d2:64:1b:
cf:02:65:2c:a5:9c:52:75:8b:9a:87:43:31:90:0d:c4:b4:49:
6c:68:dc:35:c3:ac:b8:25:01:58:cd:7c:43:aa:0e:c2:00:e7:
bb:0c:fe:89:16:2a:69:a7:82:62:3c:c4:b4:af:65:63:69:d8:
fb:64:94:e2:1e:de:b3:98:0c:c0:29:76:4b:4e:f5:41:86:d0:
ce:8a:ae:19:3f:6b:0a:3a:a3:6f:b7:0b:fc:55:a4:96:c5:49:
6a:66:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:34 2024 by rpki-client on console-fra.rpki-client.org