Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
File: TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer (raw, json)
Hash identifier: JPR4/AXod7vmo5vpJ/M/Foi3+roHStnxMhRlA62CIm4=
Subject key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC110B0F88AC10FB09E1A5F49C18FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.109.62.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:11:0b:0f:88:ac:10:fb:09:e1:a5:f4:9c:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:73:71:a5:67:64:50:1f:ad:85:a7:48:09:
0a:f8:83:b4:1c:7a:b1:ca:d2:ca:93:dc:71:97:00:
bd:e4:dd:4f:05:fc:8c:4b:d3:e1:99:d7:bd:34:8e:
af:1f:f1:18:f4:c1:a4:25:f8:8e:13:dc:ea:fe:16:
7e:9f:fb:89:cb:8b:87:9b:22:85:e3:8e:fd:68:20:
e4:b4:23:45:36:12:8a:11:08:72:d7:07:6a:fd:df:
91:a9:0a:8a:1b:5b:5b:8f:0f:e0:26:09:3f:45:47:
51:1b:1c:02:34:92:eb:e2:35:69:7a:61:1c:35:62:
d8:d5:1e:e9:3e:19:9a:21:99:5a:ef:52:31:77:cf:
0d:f2:1e:aa:ee:10:04:63:90:b5:17:5b:6a:9f:3c:
38:34:7a:34:25:52:b9:08:0c:ac:c8:e3:28:41:f5:
75:8c:48:3f:4d:e7:35:e1:df:95:80:44:a4:41:7b:
52:58:01:89:05:ce:15:af:dd:a2:05:72:8c:15:2d:
54:f8:f3:75:71:44:0e:27:89:7a:34:8b:aa:cc:cb:
41:2a:db:1c:74:4e:e5:5c:2b:db:97:a4:1b:a7:8e:
a9:33:80:9e:b1:a2:48:0c:9f:56:dd:c1:23:52:dc:
a9:8d:25:b3:f5:b6:20:5d:99:cd:11:75:c3:46:50:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fa:bf:31:9b:9f:fd:7b:4b:3a:dc:26:93:6c:5e:99:71:b4:
d8:8b:fa:f9:e6:d3:11:1f:42:4b:75:e0:32:dc:08:d5:3b:09:
b2:95:2a:96:c6:1b:6b:40:ee:93:d4:57:e5:4f:8d:a8:f7:41:
c6:9c:f8:57:bc:17:a1:8d:c0:2a:46:34:bb:d4:f7:36:9f:cb:
c8:88:8f:52:f4:57:e0:df:d9:5c:88:29:d6:69:c6:56:e3:74:
e5:48:43:41:9e:16:b6:ab:33:3f:f4:59:bb:d2:8e:80:6c:d7:
0f:34:94:82:7f:51:33:e8:ae:50:45:bb:a5:aa:6d:05:8d:4a:
79:7c:db:7c:8b:fc:d0:44:52:a3:3c:f3:f4:9c:f2:cf:94:6e:
a1:de:0b:43:13:b5:fe:4b:cb:f8:fb:70:64:70:ab:44:be:6f:
f6:be:19:95:7f:69:f5:2f:6d:08:d4:e6:a8:d9:05:9f:30:f7:
01:d6:00:12:da:0c:bd:b1:fa:b9:70:9f:c4:e0:96:b8:9c:97:
f7:5e:ae:4a:85:41:c7:31:13:08:46:9d:e2:3f:03:e3:eb:5b:
85:fb:64:dd:32:79:a0:a3:0b:3d:12:b7:83:f5:bb:69:e2:43:
8b:5c:15:19:50:c2:2b:a0:24:a6:47:3c:d8:71:23:a0:5e:a0:
eb:8f:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:33 2024 by rpki-client on console-fra.rpki-client.org