Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
File: TeLcLByThHv5efmwEO3EzahJ9Pg.cer (raw, json)
Hash identifier: CBr3oIg366Wy89UM3FuHXYdUE5UrueZwPJtBaAKqNVk=
Subject key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA28F4F24FAC93B9C6F441E8E959D025
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2e64::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:f4:f2:4f:ac:93:b9:c6:f4:41:e8:e9:59:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:17:b4:67:ea:cc:51:5d:33:c3:a9:19:6d:
2d:61:d4:52:d0:f2:bd:ce:f7:28:12:2d:43:29:f3:
d0:5c:73:65:f4:e1:f8:ad:d4:46:3f:3d:c4:66:51:
ab:77:7a:59:a0:cf:e9:59:4e:c3:bb:7a:f7:6d:42:
76:a8:8b:47:77:1d:bd:28:65:50:35:e8:6e:a0:4d:
ae:46:24:ab:d2:46:28:73:f9:1c:3f:4a:a8:2e:e5:
ec:4f:25:39:67:83:3a:6e:c4:94:35:93:a3:bc:7c:
42:50:89:f9:df:7b:fc:6e:73:95:a3:11:43:32:14:
fd:7c:e5:c5:98:7e:46:d8:7d:52:3a:d3:8a:d0:2d:
6e:61:81:88:07:eb:cd:c4:08:1b:3c:af:49:ec:3a:
eb:50:f1:1a:97:7a:ee:0d:18:4b:c3:01:87:ea:97:
3e:f2:e3:98:8f:cc:35:91:42:a5:f6:3e:50:06:d5:
28:fd:5f:42:08:bd:20:e3:ea:d2:13:39:a1:cf:79:
d5:75:e9:49:19:7d:67:25:83:61:c7:1d:7d:e8:12:
ab:46:b4:17:80:4d:19:e2:7a:51:30:eb:81:b7:dd:
36:17:34:18:e4:ce:bd:d4:85:f1:c0:a2:24:c9:a6:
af:ed:3f:8a:2e:b0:be:19:10:c9:13:ce:40:0e:3d:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2e64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d6:8c:23:f3:00:e6:d3:e7:58:35:6c:24:e4:c4:e0:e9:07:
ca:82:cd:56:8c:31:78:0d:f8:e2:ad:a0:f5:23:e7:57:6b:6c:
12:d3:32:58:c0:12:79:d9:cd:82:45:9b:76:1e:60:20:d0:40:
eb:51:cf:ee:8e:8b:af:c0:db:a0:1b:73:04:98:24:6e:d5:a1:
10:d6:5e:35:7b:10:b2:75:42:3a:97:62:7d:cd:21:10:d5:8c:
8b:15:a2:e0:56:80:be:90:bd:0f:15:03:e5:c5:63:68:58:a0:
93:bc:5e:67:4b:b4:b6:71:41:62:48:09:d3:1f:c9:d2:fd:91:
6f:62:0f:f0:ac:b8:a2:68:2a:00:b9:9c:92:ff:c1:28:4a:86:
58:e4:f8:f9:e5:76:0e:8e:e9:31:62:85:ce:8e:e8:98:70:c5:
eb:fa:c1:19:31:28:bf:a5:13:61:55:70:32:02:e1:d1:25:45:
9c:50:4c:82:93:ab:43:e2:ad:21:29:15:3f:e4:35:f3:c2:c5:
25:ac:4a:75:57:fd:a1:71:82:a4:3c:de:c7:e4:91:37:10:45:
61:17:bd:40:d8:22:c3:55:e9:19:a7:bb:be:f8:dc:e1:7e:dc:
d7:3d:82:39:92:e1:2a:da:2a:cc:4b:1b:33:24:fe:8c:99:64:
cc:f8:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:00 2024 by rpki-client on console-fra.rpki-client.org