Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
File: TgfHPboamfW7wV94xjkKqZwmmCQ.cer (raw, json)
Hash identifier: 2TRXn7AfYvc1R9WK+ugDIT2MQ+ucU4xCoJW6JE9TjGM=
Subject key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E821C40C9AB3E07A78B44E41BC28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207171
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e8:21:c4:0c:9a:b3:e0:7a:78:b4:4e:41:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:73:e8:72:c9:6c:50:80:4d:d5:91:98:97:
81:88:41:87:e2:09:7a:35:33:f8:2f:77:b3:cf:db:
ce:14:2a:ef:ac:53:d2:1e:ce:43:1a:d7:a9:ae:cf:
02:ef:0f:24:b5:a7:d1:cb:20:f7:da:16:c9:be:31:
74:f0:91:81:2d:32:c5:1c:7e:77:58:63:33:f0:d9:
11:b0:99:48:d4:f9:a2:e3:0b:76:cc:7d:13:7e:fe:
53:bb:70:ed:93:aa:27:b9:a5:0f:21:2c:5f:46:fa:
e1:6c:65:d4:ef:fc:eb:74:b5:49:88:59:5a:a1:06:
d9:25:3b:f2:1e:63:df:c5:b0:98:26:bf:0c:ef:a0:
eb:0b:65:84:a4:0a:de:36:cd:52:8c:7e:50:3d:d9:
5c:22:5a:7d:d9:3a:a4:2a:89:6a:a5:e2:86:da:fc:
b5:a7:5f:b2:b3:f3:0a:0b:5c:c2:86:d5:9b:14:6f:
b1:62:48:4f:0d:bc:30:c8:55:96:75:56:0e:b8:03:
95:66:0a:ed:8f:fe:05:80:d1:f0:ec:bb:94:bc:41:
60:2a:e4:b4:58:1f:00:27:75:5f:b6:0a:0f:46:cd:
05:d6:eb:3f:ea:05:11:80:96:8d:83:44:3b:e5:0d:
70:d7:07:15:7e:c9:57:52:00:0f:68:43:2f:bb:f9:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207171
Signature Algorithm: sha256WithRSAEncryption
8d:fb:72:b8:e0:fa:91:55:57:31:c2:19:ad:9c:07:60:1d:31:
c9:02:5d:96:27:5e:51:23:c6:aa:5c:55:06:e9:80:7d:f4:1a:
f6:13:ac:e7:e0:6d:92:1c:f6:ce:64:e8:32:5b:23:00:b9:8c:
ec:42:b3:a7:03:d0:3b:76:55:e5:3c:91:54:4b:8e:73:7c:76:
73:3a:34:d2:11:6f:9d:12:c8:8b:3d:18:55:99:d8:95:de:1e:
a7:06:d0:30:d0:f6:68:cc:41:40:98:40:58:19:da:a4:89:df:
6e:3a:dc:7c:5b:5d:e8:2c:b8:95:45:a0:2d:79:32:82:3a:1c:
09:d0:17:18:d1:b5:a8:05:94:26:7f:a0:23:4c:2a:75:6e:eb:
d9:57:2f:cc:f8:e3:3b:57:83:03:8c:2b:71:c1:65:a9:dc:c1:
71:7f:0f:28:8d:50:c6:08:52:4f:6b:3c:42:c6:3a:e8:05:67:
8b:cc:38:04:2a:e0:b0:11:3b:e8:9a:16:34:f4:58:9d:ba:00:
df:3a:c3:6a:85:9f:ee:ef:6c:63:4d:0c:a7:96:ed:48:19:2a:
64:0d:27:44:94:d7:2a:17:51:95:17:0b:19:84:52:83:50:1a:
2d:38:8c:8e:3d:99:ae:cc:d8:de:3e:5b:65:0a:f3:8b:da:ee:
a2:c0:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:24 2025 by rpki-client