Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
File: Tchxtd3wdAsxfR4042smgQu5gCY.cer (raw, json)
Hash identifier: RsqdIqVJhHR9IG5KpSaG4oOuxc4BMkOBZF4l/TL+FOE=
Subject key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF34FD479309B17A5E057653BFC82D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204368
IP: 185.250.88.0/22
IP: 2a0e:cd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:34:fd:47:93:09:b1:7a:5e:05:76:53:bf:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:31:eb:d8:77:a7:c0:c8:51:49:b6:f3:2f:
8e:03:6b:c8:52:25:2a:aa:91:fe:33:af:cc:79:f5:
cc:3d:f3:cf:5a:04:50:ae:58:d5:c2:18:e0:7d:5f:
2f:fe:ed:cc:98:7a:9a:ee:9f:ba:1a:63:f8:89:67:
b8:72:7b:d7:b9:e4:92:4d:4f:75:24:38:54:83:35:
a0:93:0a:85:ae:dc:80:23:21:34:0a:d3:0c:4b:a9:
63:cb:c1:df:e4:38:30:63:d1:6b:80:ac:f8:8d:d4:
82:68:20:90:0d:eb:95:14:8b:b8:31:69:52:a5:ad:
4d:4e:09:af:18:31:20:14:aa:2f:78:9c:6f:ea:b2:
5c:cc:e5:f0:4c:7b:93:f5:b9:e7:dc:70:f1:f5:c0:
35:d2:e9:a2:bc:f8:40:c6:1d:02:1c:8c:b3:82:6b:
69:4b:87:aa:49:cc:b8:af:9a:24:0b:a4:f2:e9:2a:
0a:66:7d:54:01:1a:7c:81:0e:b3:c1:8f:95:51:f2:
ea:6b:3e:f8:1e:05:f8:c5:56:74:4d:5a:86:2c:47:
dc:eb:fa:2c:1b:05:50:2b:45:10:ce:c9:a0:f5:1e:
ae:d0:e8:cd:02:2e:d1:d5:bb:b7:36:37:77:44:16:
5f:0a:48:d1:97:eb:e6:51:6d:f4:4a:c8:ea:46:27:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.88.0/22
IPv6:
2a0e:cd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204368
Signature Algorithm: sha256WithRSAEncryption
6e:56:48:cb:a3:22:f7:8e:68:09:ad:c8:62:fc:16:9e:83:6a:
ce:e8:94:18:6e:b6:89:c9:a6:cb:c7:1a:c9:4b:98:5f:fe:df:
50:08:31:35:89:bb:37:f2:63:f2:7a:79:49:f3:55:51:0a:28:
a6:08:fa:cb:d7:67:69:88:e2:52:ea:37:f5:f3:97:11:f2:a1:
94:b8:e3:74:f0:d4:d7:fa:bd:08:8e:79:ce:9e:eb:91:7c:65:
23:a2:82:f1:02:97:51:fe:9e:f6:a0:ba:b6:16:38:6b:d9:b3:
63:35:b3:07:7a:d4:78:be:20:eb:d6:65:6d:3d:58:7b:b1:b0:
20:eb:16:dd:c2:90:dd:60:53:50:88:ca:73:0c:20:d0:57:1d:
ff:6f:9c:45:3d:c8:44:19:46:5e:2f:a9:89:7f:61:e9:22:36:
d5:9c:d0:f9:43:9b:80:c3:60:cf:e5:4d:c2:60:58:b7:1d:42:
d5:2a:3e:70:7a:42:7d:4b:42:e8:34:03:5f:ac:00:de:5c:c2:
9d:ae:68:98:af:30:26:a2:d9:a2:3d:6f:d5:e0:d4:80:c6:e9:
c0:b7:3b:99:04:2a:68:50:ef:3f:19:a8:af:bf:05:5a:bf:13:
6d:bf:3b:e7:2b:0b:61:4f:f1:bb:da:98:a6:b3:2e:87:ea:08:
e8:8f:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:50 2024 by rpki-client on console-fra.rpki-client.org