Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.cer (raw, json)
Hash identifier: i+L861tje+5ppv7X9PUyg0lRHDs6FIGwAaPSEpdyW3s=
Subject key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01922F04BC7062FB9336D965CF8EE05E2F4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Sep 2024 15:48:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.81.88.0/22
IP: 2a03:62a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:04:bc:70:62:fb:93:36:d9:65:cf:8e:e0:5e:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 15:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:d5:f1:79:67:a0:d7:e7:ec:f0:5a:a3:ae:
3d:bd:37:b0:bc:80:43:de:ea:8b:b1:17:a9:5c:c6:
07:63:4c:a6:8a:19:9d:b2:58:db:a0:4a:e8:b7:72:
e2:fb:f0:4b:6f:66:b0:cb:b4:be:1b:87:e6:14:39:
f2:26:60:2b:ed:26:a9:2f:57:ed:18:12:9b:04:5f:
c9:cf:9a:71:3f:71:e7:fe:29:60:fb:9a:ca:6f:c0:
3e:38:ae:4a:25:3b:1a:01:23:00:16:89:bf:04:de:
c1:e3:69:f8:1b:6a:cc:00:2e:6b:6c:42:03:83:0c:
52:6f:cf:95:61:cf:f5:b9:ed:70:94:4c:f6:6c:e3:
91:d7:ae:fb:72:38:76:38:47:06:6a:86:5f:ab:21:
1f:c2:41:52:bb:14:4b:82:d1:d8:bb:5a:e5:5a:e9:
64:a8:ff:58:e0:2e:a3:77:df:d8:ae:33:51:8b:d2:
c9:97:41:17:18:2d:e5:62:fe:aa:da:d6:62:8d:e0:
61:20:d0:33:e5:64:71:06:05:bb:40:f1:f9:a6:ba:
12:2c:f5:01:f0:ee:9d:3d:1a:ee:64:c6:e4:28:05:
1f:f8:0e:10:07:15:f4:de:10:0d:3d:22:21:ab:a4:
39:be:c2:a5:8f:28:88:c7:18:78:e6:32:0b:c5:e8:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.88.0/22
IPv6:
2a03:62a0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:d5:37:f9:c0:3e:17:32:43:2c:be:5a:86:b1:d0:d7:e7:da:
53:0a:d5:43:20:d9:d9:6e:90:fa:02:4b:5b:6c:1f:2f:d7:31:
c2:b4:f2:ea:ed:64:48:f5:a5:0f:52:e9:b8:74:ae:e2:1e:7f:
0d:bc:61:88:b9:c1:24:ab:49:bc:d7:49:ce:14:98:d3:0d:94:
77:50:39:14:f2:ee:02:c3:9a:d3:83:38:dc:62:29:a6:e4:60:
43:49:f4:b1:21:8f:1d:ba:be:1a:3d:6a:c9:67:4c:b0:d6:b5:
9b:d8:c1:4f:ec:cd:a5:88:f1:20:f6:ac:e9:cc:a6:45:23:ac:
68:cb:40:fc:fd:52:b0:e1:2a:c8:c0:f1:b6:45:c5:16:cd:11:
b2:90:41:09:17:2a:76:8c:03:e2:fb:52:fd:69:7c:02:5a:60:
3c:6e:d6:ef:0e:c3:b7:2c:0b:e8:5d:e9:4e:66:12:d5:1d:f5:
f7:05:0a:6f:d5:57:fc:7e:bd:13:bd:0f:4e:de:16:b2:a3:87:
a4:e3:65:aa:67:14:14:9d:3d:79:95:47:c4:ec:bb:5d:99:ee:
3a:96:0b:78:fb:80:9e:19:a6:3c:a1:18:f7:f0:25:54:ed:b2:
e2:ae:04:a1:b4:fc:10:ca:4c:fd:31:c8:99:57:e9:5d:21:89:
27:b3:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:32:17 2024 by rpki-client on console-fra.rpki-client.org