Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
File: TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer (raw, json)
Hash identifier: ax5X3UaaG2xoUDcMOQDC+oFsR3dhX9g0pdi3sg96P5c=
Subject key identifier: 4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD16564E665860517C27A7AB6D6DC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199742
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:16:56:4e:66:58:60:51:7c:27:a7:ab:6d:6d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:32:05:43:65:ac:f3:70:2d:68:6b:5a:ba:
5f:32:ea:74:20:2a:a3:f0:2d:96:50:1f:28:29:9e:
86:41:99:22:c8:f8:b9:c3:4c:c8:66:e9:6a:3d:5e:
9f:54:86:e8:52:73:55:fa:ce:d5:5b:c1:81:f3:6e:
60:cb:90:a6:e8:46:fd:d9:c7:3b:51:21:76:bb:34:
37:6a:5e:56:be:45:08:ec:d0:93:58:62:9b:75:50:
77:47:3f:35:77:74:86:3f:7b:93:dc:c8:70:58:6a:
1c:21:19:1e:4b:97:dd:8d:d3:9b:f7:cb:ba:1d:a8:
ef:4f:8e:ac:6f:44:37:03:79:2e:d4:8c:bd:69:83:
45:a1:24:a4:01:cc:81:97:ad:51:8c:58:e2:17:11:
80:fa:20:44:78:9c:3e:7e:1f:19:bc:88:38:d0:70:
fb:af:fd:52:e4:c5:71:18:62:c4:f8:54:c0:3f:44:
9a:53:9c:54:ec:5a:7d:c5:7c:7a:ab:b0:c3:78:72:
ce:aa:66:6b:15:36:41:12:38:c5:4c:41:09:16:a9:
2f:ad:60:9c:88:99:44:8a:72:3f:fa:be:26:8b:85:
ed:8d:8d:fa:3d:18:93:1a:e0:7e:f2:77:03:0c:3f:
b0:39:20:a5:c2:32:1e:85:b5:b1:4a:f6:77:e0:eb:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
Signature Algorithm: sha256WithRSAEncryption
9d:71:b9:1a:cb:ca:8b:83:25:7b:30:31:ac:74:8e:4a:26:bf:
39:49:82:a7:66:95:30:66:13:b1:fe:49:80:c6:d2:36:69:9a:
60:39:ec:2b:60:9b:df:04:a1:4b:d5:41:6e:4e:a8:0b:f0:75:
39:52:c1:51:5f:30:7a:56:7c:88:b8:4b:a7:ea:af:73:0e:da:
af:4f:77:7f:62:cf:5d:98:4c:56:c9:e1:63:5d:35:c4:24:33:
1b:21:3a:6b:92:c8:59:7e:bf:23:06:25:82:1a:7a:9f:2c:50:
d2:1f:45:ef:59:79:9d:8f:ea:ff:95:c2:6a:c2:10:c5:32:c7:
17:2b:02:69:29:a6:d7:fe:30:4e:92:6e:07:3f:4c:e3:5a:ec:
0b:e3:94:e0:3b:1c:6b:19:eb:27:49:ae:bc:89:f3:77:42:3c:
fe:87:90:d1:3d:54:b0:34:74:49:3b:10:35:d9:ef:f0:c7:b4:
f9:81:e8:bd:71:67:7b:a4:29:66:9f:90:c0:87:13:cd:10:b8:
9b:db:3e:83:3d:3c:b0:1b:6d:20:2d:4a:f2:2b:9f:64:dd:f2:
a1:62:64:12:14:06:b1:0d:62:37:2e:41:9a:2c:53:98:8b:7f:
a0:47:05:92:6e:93:06:a7:4b:e7:54:ba:cd:3f:97:28:3e:40:
39:48:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:16:37 2024 by rpki-client on console-ams.rpki-client.org