Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.cer (raw, json)
Hash identifier: n86McwY5wGZsXY5BLj/yHO6nIdSErTjG7WfZW+FFsF8=
Subject key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500C923533FD2746C1657AA42F856E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43625
IP: 91.198.84.0/24
IP: 109.232.48.0/21
IP: 185.160.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c9:23:53:3f:d2:74:6c:16:57:aa:42:f8:56:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:2e:78:9a:cd:d5:2f:83:3a:72:b3:87:7e:
6d:f1:b1:28:c1:05:3a:77:fa:69:31:92:de:78:bd:
5d:5b:83:bf:cd:09:34:04:cb:18:db:c1:72:a1:cf:
8a:64:27:d5:20:a5:56:9a:a5:bf:a5:95:ab:80:0e:
81:8c:8d:9d:27:20:9a:b4:d2:27:60:99:a5:73:e3:
4f:16:a4:52:ac:48:37:4f:b7:e5:02:3b:a7:37:39:
3f:50:33:31:9b:f0:de:be:68:9f:db:f8:70:56:cf:
77:7e:55:82:0a:c3:d7:bb:3e:3d:04:57:81:c2:fe:
ad:fe:43:ba:58:1e:08:f2:89:f3:49:64:34:e4:8c:
ca:ca:fa:ec:4c:88:0b:f0:fc:f7:9f:25:11:71:e6:
ac:f3:f9:a3:da:a4:35:82:d6:76:05:fa:62:21:b2:
b8:36:28:b2:81:34:34:20:6b:22:7c:dc:2c:46:e3:
43:72:ad:81:82:ce:1f:5f:9d:39:e2:ec:eb:7f:f3:
56:44:ef:9d:87:27:6b:ec:c8:63:76:ca:15:92:98:
55:ca:88:a8:53:01:aa:6c:23:5c:e8:24:68:cc:80:
3f:09:83:f5:71:1e:e5:1a:d8:39:f9:8b:99:67:3c:
41:03:4f:2a:d0:f0:c0:96:83:e4:cb:05:54:d8:eb:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.84.0/24
109.232.48.0/21
185.160.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43625
Signature Algorithm: sha256WithRSAEncryption
7e:a3:6e:5f:f1:66:04:42:53:71:50:b2:3f:14:6a:23:86:96:
82:68:73:0b:63:ba:31:e1:da:fa:ba:3f:93:dd:58:46:bc:57:
22:ec:04:49:83:57:f2:a7:3a:05:33:57:f0:75:0d:1e:36:a4:
8c:64:f3:9d:16:a6:34:57:f6:30:a7:b2:bb:51:92:f4:2a:2f:
ed:9b:48:46:eb:54:bb:0c:47:7f:83:7e:f6:b4:1a:fd:c1:f2:
21:01:a5:c5:00:57:73:87:9b:ea:23:0c:ec:9b:7d:b1:2f:42:
5b:c1:35:20:7b:86:b0:4f:62:9a:d2:bb:37:3a:12:a1:64:3a:
3f:08:92:93:1a:73:1b:62:66:2b:52:3c:0c:74:fb:ef:db:e3:
ad:e6:20:f2:d8:f9:7d:d7:2d:0a:bb:21:b2:39:7e:48:2f:a1:
c5:60:c4:8f:eb:ca:22:75:42:fa:58:21:7e:1e:e8:04:9e:1f:
e3:3a:47:e4:f1:1f:9a:06:0f:ff:01:96:73:c4:45:a9:75:cd:
81:5b:8f:c7:64:23:13:a6:a9:f8:fe:35:d7:17:b4:f2:ad:97:
0b:5b:ef:a8:62:ba:0a:f9:65:15:79:2c:11:14:20:df:db:09:
a5:96:8b:5d:7b:d7:39:7d:e7:c2:3f:51:bb:01:36:30:25:dd:
f3:6a:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:00:59 2024 by rpki-client on console-fra.rpki-client.org