Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
File: TK8RFQzl_p9w82yYBnR7toKxyiE.cer (raw, json)
Hash identifier: KhCfXIP1m8td9wbUKT+3qGQPWQmRIFBC5rl9XTOaTPE=
Subject key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABEDEA19F0586777C18F0B19E25B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35453
IP: 45.67.64.0/22
IP: 2a09:7140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:de:a1:9f:05:86:77:7c:18:f0:b1:9e:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:31:6b:86:e7:14:cc:d7:26:18:79:ab:ce:
50:6d:9d:eb:7a:64:8a:d5:ef:7b:d0:23:49:0f:f5:
ae:9a:3b:91:ed:d3:49:82:1d:7d:55:b2:c2:10:5c:
30:3a:c2:28:ad:7a:ed:bb:48:b3:58:67:c1:d1:76:
7d:4d:52:a4:58:c4:21:0a:bb:d8:5f:13:ed:97:56:
c3:89:b6:f4:e0:ed:e5:d6:37:d2:d6:5d:1f:dd:a7:
49:67:00:34:6f:ce:ba:70:39:65:11:fa:6e:91:89:
28:10:01:1a:b3:17:2f:86:33:5a:f9:69:26:15:14:
c4:38:83:39:a1:d5:6b:25:75:df:7a:03:d9:df:09:
2c:61:51:3c:cb:99:58:d2:f1:f7:a1:7e:89:80:69:
e3:d6:81:94:ee:b3:e9:bd:e8:f0:d9:95:3a:0f:39:
16:db:99:86:72:55:54:75:fb:3b:dd:ea:1b:5c:d1:
65:cb:a1:a0:aa:20:f3:06:94:8e:f5:c1:2d:c9:9e:
d8:bb:28:fb:12:a4:0a:02:b6:29:08:0b:37:3f:37:
c5:5e:0b:2b:4f:24:6a:e5:2b:55:bf:59:a6:67:d5:
3b:71:9a:8b:90:ec:04:29:24:b8:47:5c:0f:6d:da:
e3:49:08:23:82:7c:d8:fc:31:23:a3:85:cd:f8:0b:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
IPv6:
2a09:7140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35453
Signature Algorithm: sha256WithRSAEncryption
6d:88:89:92:8c:1b:f5:a1:01:af:d0:de:20:c3:7e:93:59:e7:
83:b4:d2:49:d0:df:d3:81:9e:f4:18:89:b1:22:2b:ad:03:6a:
f5:65:bd:ea:0e:b8:77:89:1a:89:fb:ce:ab:79:3a:c1:aa:1c:
fd:d0:6c:db:45:11:7f:e0:7f:9c:68:7a:ee:31:c5:dc:ec:79:
8b:98:48:1f:ac:74:c3:43:c2:bb:85:45:13:d1:18:cd:e1:5a:
b6:fa:dc:d9:31:6e:23:ea:52:ab:00:a9:5f:a9:83:67:c8:87:
9d:83:00:c5:82:4b:4e:6c:9b:85:56:36:be:e3:d6:ed:ee:6b:
23:91:b8:6e:25:91:9e:7c:73:bd:4f:d7:b3:a2:be:0b:44:52:
df:f3:c6:f5:8a:93:f3:65:fb:25:a9:ca:6c:a5:62:c9:78:6c:
09:a5:a2:85:77:b5:28:b7:c8:ef:1d:22:b0:53:32:69:1d:f8:
df:60:44:4a:dd:a2:c7:05:55:4c:69:2c:20:cd:13:b3:27:ee:
77:4f:db:4d:bf:0b:f4:03:30:82:ab:b7:f8:2d:fa:a5:78:2c:
6f:f6:18:f6:70:09:4c:56:da:dc:80:54:a1:0c:eb:4b:df:c6:
5b:69:f9:cb:dc:6b:3b:e1:19:4c:ae:37:58:68:08:49:a1:22:
3e:56:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:35 2024 by rpki-client on console-fra.rpki-client.org