Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer (raw, json)
Hash identifier: kBaCtD7JHJ4o/CZgxMEkV/kZc7TTSyuFv7j87bVnT+A=
Subject key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50121738572E6EA2DDCEBA9A7A6EC10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2f50::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:21:73:85:72:e6:ea:2d:dc:eb:a9:a7:a6:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:9d:7b:65:20:a9:45:d2:a5:95:91:de:77:
b8:23:ed:99:35:4c:2d:ef:fc:83:de:e7:a2:85:7a:
5b:5d:a4:eb:bc:ba:ae:b1:b0:d2:ad:f0:2e:51:2b:
f6:a5:ef:77:d9:35:99:25:0e:82:55:7b:28:79:bc:
c6:8f:d4:04:ef:15:9e:db:42:49:27:6e:5c:3b:68:
83:d9:ca:bc:e6:b9:a6:7c:08:a5:17:f3:3f:a0:2f:
33:3f:15:8b:19:e6:94:28:d2:5e:24:71:0f:38:01:
33:9d:31:af:60:08:1b:79:fd:db:2b:fa:ff:79:c8:
cf:cf:79:30:b9:d1:54:a3:86:aa:25:70:21:8f:5b:
6d:35:5b:2a:74:a4:86:ba:71:05:a3:55:4e:00:3c:
e7:cd:cb:1e:a5:c2:1a:51:75:66:9f:f8:98:18:38:
52:74:f4:e7:e7:ae:27:0b:98:09:7f:7e:aa:39:93:
b7:4e:c3:6f:e4:fb:7a:1c:a2:fb:12:73:d8:7e:09:
31:9a:31:2c:5f:e7:b7:3d:b0:f3:0b:a7:69:ed:67:
b1:fe:a4:05:a2:b8:7e:ed:39:01:66:db:f7:ef:18:
de:5b:70:a1:f7:af:f8:67:83:17:18:a6:a9:2e:6f:
50:52:79:74:0b:25:f7:26:69:e7:54:06:8d:81:d9:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f50::/48
Signature Algorithm: sha256WithRSAEncryption
53:2e:94:fb:3c:3d:1c:0c:3a:e0:19:95:7f:a9:49:f9:b4:85:
cc:71:5d:4b:2c:ac:2b:e9:af:80:ea:ef:5d:3c:f8:1b:42:0b:
8e:96:89:f0:11:1f:b1:0d:6c:fe:db:07:40:f1:5d:10:9c:de:
3e:db:80:5c:0c:95:25:de:b9:6d:4b:de:b3:8c:0d:71:7e:44:
4e:19:fd:87:6d:ee:ef:20:17:02:9f:61:d2:72:b0:d7:80:81:
44:9f:a5:7d:8b:f4:87:ff:66:1c:23:50:30:1f:8d:a4:ee:79:
10:32:77:d8:4b:ae:fd:14:18:d8:fe:42:ab:76:45:85:ea:97:
7a:7e:c4:83:a3:f3:0b:dd:13:81:d5:54:9b:68:ae:63:e1:8b:
fe:06:3e:66:d7:8c:23:41:06:7e:97:09:c8:a7:a7:fc:31:2e:
87:56:d9:77:b9:a0:80:45:fc:ba:5a:66:86:39:cf:10:3f:9a:
5c:60:a3:ca:f6:b2:a6:89:e0:08:9a:73:c7:98:da:d9:91:bb:
f3:7f:99:37:58:3e:0f:fd:d5:7f:6a:2a:50:6f:f0:06:22:66:
6f:a4:e3:06:64:ff:51:f3:69:cb:d2:a1:48:f3:de:7f:22:3b:
54:4c:f5:b0:9b:de:f4:22:c8:95:bc:b3:78:29:90:dc:fb:71:
6d:92:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:43 2024 by rpki-client on console-fra.rpki-client.org