Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
File: TTpxp39MqbpTb5hhKpxW1AwMO50.cer (raw, json)
Hash identifier: M72xLHLL9g02e+ta1uiiuK2VLw7+ZFzI5OWCJnF+28g=
Subject key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6718FCBFBA8C170A9F3DD1999BAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.82.188.0/22
IP: 2a0e:7280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:67:18:fc:bf:ba:8c:17:0a:9f:3d:d1:99:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:c3:aa:f2:0e:77:f4:6c:7e:6d:6e:b8:04:
a7:99:5e:be:90:e1:e4:63:50:8f:53:31:3f:9e:a9:
9d:dd:09:f8:d3:09:5f:b3:6b:2e:d3:1f:93:45:63:
e5:37:d8:85:5e:87:47:16:c9:73:19:3b:db:74:92:
94:3a:9f:13:8f:c4:0f:8f:0a:f3:16:d5:4f:eb:db:
c6:27:fb:1c:fa:bd:9f:83:d2:f8:cc:f6:be:a0:98:
7f:7f:5b:12:3d:78:c1:81:4f:fe:20:39:85:d0:bc:
e4:12:eb:57:c1:61:a3:e9:e6:57:37:7a:e0:3a:88:
0f:1f:49:42:1b:81:03:89:0f:2e:3e:37:f3:48:cf:
f9:a2:80:98:a0:17:69:bd:ea:ad:03:b2:b1:27:45:
35:b3:b6:cd:a3:be:1e:11:71:e0:94:ee:e9:d4:18:
01:22:36:05:c5:08:ba:53:02:82:13:56:19:2e:c7:
fe:67:0d:9e:18:a1:50:8c:6d:ea:be:98:3d:8d:b3:
1b:12:9b:c1:4f:e4:67:01:35:d9:79:98:91:57:22:
ea:36:af:c9:79:1d:ce:30:c1:d4:17:cf:46:eb:3f:
cb:10:56:d3:fe:50:bb:98:33:ba:c1:a4:3b:e8:8d:
90:ba:a5:a1:00:65:6f:de:13:9c:f5:cc:20:89:3a:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.188.0/22
IPv6:
2a0e:7280::/29
Signature Algorithm: sha256WithRSAEncryption
a6:f1:ad:a7:81:e6:72:a7:1c:e7:4d:56:53:15:88:0d:0d:08:
d0:6a:fc:ee:e1:94:92:99:7a:e8:06:9d:c3:60:be:86:ef:48:
67:90:fd:87:4a:bc:0d:43:05:2d:7b:6d:92:a3:0b:31:ae:01:
c8:1f:fb:78:50:db:46:8a:42:a4:3f:78:79:74:1d:6a:94:12:
ba:2f:6b:73:37:f0:ec:70:f0:12:0c:f3:5c:c7:f5:39:13:3e:
ac:59:e5:b7:88:ee:ce:ff:c1:ea:86:b3:be:17:45:3d:cb:d4:
cb:84:0b:e8:7c:bf:2f:db:9b:f1:17:e8:8b:d3:da:d2:71:6e:
03:f5:bb:d3:cf:14:bb:38:08:a0:18:62:37:9a:bd:ba:7d:18:
10:03:c1:3f:ad:9b:37:2d:c8:03:8b:06:82:db:5a:37:d1:73:
e6:8e:00:9d:eb:b0:f0:bd:9a:43:a0:d3:00:16:9a:4c:38:c8:
08:a1:ec:80:48:80:a5:e4:59:e4:47:67:2c:f5:94:42:13:e8:
ea:0e:dc:10:1a:1e:43:61:e1:f5:07:75:5f:b4:69:a1:dc:dd:
48:c6:38:20:a5:f2:e4:88:4b:7d:d5:9c:00:5c:88:2c:32:4a:
b9:06:cb:fb:88:08:82:93:f6:b6:4d:76:64:db:be:b9:0b:92:
a6:55:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:05 2024 by rpki-client on console-ams.rpki-client.org