Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
File: TO1MeGdCnuAvXNwa--qlunEzYAg.cer (raw, json)
Hash identifier: GHKMOXR54ajaEnT7fseDO1jzVotG3YXZRNb4MITZ3o0=
Subject key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF0BF9E2E549F35AB0B4361225075B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.64.116.0/22
IP: 2a03:1360::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0b:f9:e2:e5:49:f3:5a:b0:b4:36:12:25:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:67:54:79:9c:ae:9a:66:d2:ab:2b:f7:c1:
32:f0:41:31:37:fd:cd:72:b8:30:22:84:b0:89:77:
af:73:36:46:37:fb:c1:f1:13:be:86:5d:4e:6c:3c:
89:d6:34:c0:58:d0:f4:ec:a9:b0:92:cb:2b:3f:1b:
52:d9:73:0f:f4:41:af:99:a4:5a:3e:23:ed:de:5f:
7b:81:4b:66:87:97:cd:98:f2:1d:74:d0:e2:b4:28:
90:9e:d4:88:c3:f6:46:48:ac:b4:9c:b1:60:58:60:
05:03:dc:e8:82:5d:b6:0e:2d:8f:6a:f3:f2:06:fa:
02:2a:42:2d:82:95:89:0e:48:42:5e:42:be:13:ae:
14:b7:d5:7b:0c:7e:65:58:c2:ab:7b:c4:11:4a:71:
fd:8e:9d:29:f2:ff:fb:14:1d:35:ce:45:e1:3f:cc:
46:0d:52:80:d5:09:bc:c0:82:8d:a4:63:68:b4:32:
97:73:62:d1:29:fd:cb:ba:54:15:e9:ff:ff:94:e4:
27:ca:17:c7:a0:fc:72:c8:01:bc:44:9c:f8:0e:40:
a5:3c:bc:9d:b3:22:d9:fd:9f:92:9f:c5:86:58:c7:
bc:89:0b:06:d3:58:a2:da:01:50:ab:31:fd:a5:6e:
d9:5a:15:70:02:52:02:a6:73:b3:8f:2c:30:f9:9b:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.116.0/22
IPv6:
2a03:1360::/32
Signature Algorithm: sha256WithRSAEncryption
7a:38:93:dd:e1:77:6f:1a:cb:86:96:1f:b8:e1:1b:13:0d:ed:
8f:47:a2:35:1c:ea:3a:89:14:31:9e:20:f1:36:33:4f:d6:7f:
5b:5f:0a:8e:42:4f:cc:ed:ef:fc:8f:71:a0:c7:cc:3c:a7:b3:
d0:97:eb:88:44:95:2d:46:7b:c9:30:49:3a:50:30:a2:40:fc:
17:14:bf:06:ef:e8:89:e8:60:62:f1:42:5c:62:e4:63:ca:ed:
05:ba:38:16:1c:19:d7:26:81:db:fd:99:8d:9b:00:d9:6e:97:
bc:ff:e8:e1:9b:ff:5a:eb:af:7d:cf:8d:d1:23:96:45:41:0f:
43:17:b0:03:86:98:56:2e:0a:f3:84:82:88:67:f5:fb:57:66:
8c:11:85:26:60:e0:09:d8:a4:4a:82:62:34:9c:07:29:c2:49:
98:b4:9c:d9:b0:c1:5f:10:f8:a0:72:e0:fb:43:87:06:50:fa:
36:42:1e:7e:b9:4d:98:0e:ea:af:df:68:43:c4:7e:bc:e8:67:
d4:e5:2a:ce:fe:4f:ad:da:66:28:6d:7d:c6:89:c6:b3:a6:8c:
54:db:a9:e1:44:be:f5:9d:d1:7c:af:ee:5a:28:32:58:5e:d9:
f3:71:34:31:33:d7:80:2f:dc:2b:27:da:41:ca:8e:04:76:bc:
7d:c0:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:00:46 2024 by rpki-client on console-fra.rpki-client.org