Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
File: Tg854squjizxS8xBsj88huGnIPg.cer (raw, json)
Hash identifier: /CNuapjhyjTjJ7Tipqd2leGQ8oShiXW3vYWbxtxppx8=
Subject key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBC2ECD30DD5CFC9F324BDAE25522D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51392
IP: 185.157.208.0/22
IP: 2a03:afe0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c2:ec:d3:0d:d5:cf:c9:f3:24:bd:ae:25:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:0b:90:c5:86:46:41:e6:24:23:13:45:bb:
97:6c:c2:3f:60:79:73:d7:5f:ec:fb:a6:47:7e:2e:
55:65:62:2f:2c:25:ed:bc:91:63:fa:14:28:6d:87:
84:41:b3:5e:f0:19:50:be:05:0c:c7:bd:a1:0a:2d:
b7:10:a0:1a:cb:e5:18:8c:1c:38:3e:3c:d0:32:20:
cb:3a:0a:b5:6c:2b:5c:4c:11:92:37:b4:a2:99:71:
82:17:3a:d4:68:0b:47:23:44:1c:7d:39:fb:a9:f8:
7f:a6:49:5f:1b:3a:a5:16:82:94:42:58:15:61:61:
f1:d5:ed:77:3c:1f:3e:52:e9:3c:77:98:1b:0d:97:
21:b1:e1:5a:79:d9:98:30:db:bd:9f:0d:3f:94:99:
f1:c0:99:1d:7d:da:48:eb:90:3d:80:09:0d:41:d9:
3c:44:60:b2:2b:70:d8:aa:dd:12:f3:55:c1:59:5d:
ff:8a:64:0b:8f:93:f6:ec:37:38:1a:eb:d5:ac:4a:
f3:ab:8f:bf:6e:ff:7c:54:bf:26:ff:40:75:82:06:
f4:11:2f:af:5d:61:fc:d1:c4:85:8f:28:43:c9:0e:
05:8a:5a:ef:4f:cd:e0:b4:ac:d4:5d:84:03:ff:ab:
fe:29:3a:c2:0d:0f:18:2d:79:b1:d7:53:1b:bf:32:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51392
Signature Algorithm: sha256WithRSAEncryption
3e:4f:c1:fc:51:14:5b:7c:fb:22:4f:6b:3c:9a:9c:06:06:92:
6f:de:f1:9d:a5:81:ae:bb:68:3a:74:9f:ef:f2:5b:21:c2:0f:
58:39:cb:a7:8e:b0:b5:aa:b7:ae:da:20:bf:78:cf:f2:3f:43:
11:a7:e3:51:6d:ed:8d:9a:5d:f1:3d:c1:aa:d3:c8:48:57:d5:
73:af:34:c4:43:2f:4d:5a:9e:e5:c7:66:68:0c:e4:75:3d:ad:
20:b1:82:61:87:f2:8a:03:17:6a:f4:87:0c:0d:e3:40:6d:44:
d6:7b:a8:dc:24:65:18:6f:a5:cd:7c:eb:d4:99:f8:e3:f5:07:
95:77:29:5a:b6:79:72:84:c8:96:b3:97:65:aa:a3:21:3f:cd:
b3:38:5e:1e:81:ff:a0:65:52:95:e1:37:20:57:8c:b0:61:4a:
db:47:61:d3:69:e7:56:fa:27:39:2f:0e:9a:f5:c9:80:89:19:
c6:a0:ab:cd:35:e6:42:9e:72:6c:f8:42:8c:c9:69:3b:ac:67:
74:58:33:1a:8e:da:7d:97:0d:4b:64:98:5a:82:09:aa:8d:f9:
c1:7f:de:34:39:aa:c0:12:ff:ba:b4:17:8f:1b:12:5e:d3:64:
e7:d4:96:88:9d:b8:90:d4:56:64:9e:f0:9c:6c:2a:09:e9:27:
f1:6b:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:11 2024 by rpki-client on console-ams.rpki-client.org