Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
File: TddPu7rljdCHbZnoDsgqEaRHf34.cer (raw, json)
Hash identifier: foswbW8xiGuyn2IBKu/hJonMIqIJxcF8y9zYG/45F4k=
Subject key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D05A15BD9666930583EFBB8038822
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25124
AS: 43245
IP: 81.91.128.0/20
IP: 91.184.80.0/20
IP: 94.139.176.0/20
IP: 109.162.128.0/17
IP: 213.207.208.0 -- 213.207.255.255
IP: 2a01:3c8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:05:a1:5b:d9:66:69:30:58:3e:fb:b8:03:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:10:a7:b1:fe:f7:8b:1c:58:63:c0:fb:dc:
bd:fd:14:1f:4f:53:53:a1:a3:e0:82:20:a2:b5:39:
7b:b9:f5:d4:ee:6b:56:85:8e:33:ad:ca:47:76:89:
1b:61:33:ee:7d:77:af:41:23:80:2c:62:76:65:a9:
cf:de:a2:45:5c:cf:9f:9d:09:54:99:1f:78:71:e7:
6f:50:c8:dd:8e:1a:68:32:ca:b8:82:28:4e:8b:9c:
26:0d:6d:cc:13:b4:5c:36:00:49:b9:98:6d:e9:b7:
db:2c:7f:0e:7e:5d:a3:22:3a:43:b7:1e:db:19:76:
e0:7c:ee:61:c7:ea:f8:50:11:64:71:ec:5a:99:f0:
62:4b:56:6b:4c:e0:1d:a1:f5:cb:73:e0:d0:0c:18:
38:ae:00:0d:dd:f1:de:e5:26:02:8b:bb:ef:c0:dd:
6b:86:ec:2a:bb:eb:72:d0:c5:b2:0a:f7:73:70:fd:
7f:f7:ea:e5:9d:81:9f:21:c3:8c:4d:d8:d8:de:87:
2c:49:01:a5:d0:69:e3:6d:23:b9:a9:a5:86:61:c8:
b3:6e:29:fd:46:33:ea:f7:b9:02:0b:08:16:2a:bf:
84:d5:3f:b1:0e:10:ac:de:65:91:43:c4:42:07:d5:
43:68:82:2c:6d:5c:4f:b5:62:52:44:10:36:00:c4:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.128.0/20
91.184.80.0/20
94.139.176.0/20
109.162.128.0/17
213.207.208.0-213.207.255.255
IPv6:
2a01:3c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25124
43245
Signature Algorithm: sha256WithRSAEncryption
58:62:d5:16:83:48:7b:cc:4e:36:b0:4d:1b:82:e8:dc:26:6f:
f6:7e:87:9d:ee:f3:b7:df:12:2a:de:95:c1:6e:99:c7:ff:b7:
c2:55:78:9d:f5:26:56:e6:d3:a3:ea:28:38:f2:4c:7b:e6:88:
e7:f3:30:0a:9d:86:96:1e:61:f9:9c:8c:bb:3b:c8:fc:15:35:
7d:c7:3a:f4:83:81:9c:9d:74:66:b6:42:11:03:33:1d:56:bb:
b7:0e:9e:3d:9a:25:28:0d:d7:51:cc:82:96:1a:53:da:b2:df:
ad:b5:5d:93:c0:fc:0a:e5:4b:46:8a:a4:69:51:32:aa:9b:96:
bc:35:48:3e:c9:cb:ad:f4:4a:b9:ae:59:5f:d4:fd:13:e5:8e:
27:35:b1:a8:05:2b:3f:48:11:cb:63:fa:ee:a5:e5:39:e7:1c:
50:a4:81:89:b4:fa:2b:c5:c1:38:d5:b8:dc:ed:19:ca:cd:ce:
e6:da:12:ab:bf:04:dd:97:aa:2a:c1:af:0b:71:bc:db:65:46:
30:dd:f8:f2:f8:03:52:0e:a9:b0:06:ec:7c:9e:79:2a:86:2b:
ca:b8:24:6f:99:44:2d:bd:c8:a8:bd:6a:d0:5b:8a:60:81:b0:
52:49:e7:a7:15:38:a9:97:a7:ca:77:ed:dd:9a:dd:6b:f2:34:
21:ba:7c:99
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAYzCbQWhW9lmaTBYPvu4A4giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGQ3NGZiYmJhZTU4ZGQwODc2ZDk5ZTgwZWM4MmExMWE0NDc3ZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0Qp7H+94scWGPA+9y9/RQfT1NT
oaPggiCitTl7ufXU7mtWhY4zrcpHdokbYTPufXevQSOALGJ2ZanP3qJFXM+fnQlU
mR94cedvUMjdjhpoMsq4gihOi5wmDW3ME7RcNgBJuZht6bfbLH8Ofl2jIjpDtx7b
GXbgfO5hx+r4UBFkcexamfBiS1ZrTOAdofXLc+DQDBg4rgAN3fHe5SYCi7vvwN1r
huwqu+ty0MWyCvdzcP1/9+rlnYGfIcOMTdjY3ocsSQGl0GnjbSO5qaWGYcizbin9
RjPq97kCCwgWKr+E1T+xDhCs3mWRQ8RCB9VDaIIsbVxPtWJSRBA2AMTX1QIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFE3XT7u65Y3Qh22Z6A7IKhGkR39+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzlmNWY1
Ny1lODI4LTRiY2YtOGQyYi04ZWFiN2Y0ZmU3N2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOWY1ZjU3
LWU4MjgtNGJjZi04ZDJiLThlYWI3ZjRmZTc3ZS8xL1RkZFB1N3JsamRDSGJabm9E
c2dxRWFSSGYzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF
BwEHAQH/BD4wPDArBAIAATAlAwQEUVuAAwQEW7hQAwQEXouwAwQHbaKAMAsDBATV
z9ADAwTVwDANBAIAAjAHAwUAKgEDyDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJi
JAIDAKjtMA0GCSqGSIb3DQEBCwUAA4IBAQBYYtUWg0h7zE42sE0bgujcJm/2foed
7vO33xIq3pXBbpnH/7fCVXid9SZW5tOj6ig48kx75ojn8zAKnYaWHmH5nIy7O8j8
FTV9xzr0g4GcnXRmtkIRAzMdVru3Dp49miUoDddRzIKWGlPast+ttV2TwPwK5UtG
iqRpUTKqm5a8NUg+ycut9Eq5rllf1P0T5Y4nNbGoBSs/SBHLY/rupeU55xxQpIGJ
tPorxcE41bjc7RnKzc7m2hKrvwTdl6oqwa8LcbzbZUYw3fjy+ANSDqmwBux8nnkq
hivKuCRvmUQtvciovWrQW4pggbBSSeenFTipl6fKd+3dmt1r8jQhunyZ
-----END CERTIFICATE-----
Generated at Fri May 3 03:01:00 2024 by rpki-client on console-fra.rpki-client.org