Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
File: TgfHPboamfW7wV94xjkKqZwmmCQ.cer (raw, json)
Hash identifier: T56ubEfxZEtq1oTH1kAFPvJb09rI46vNcl9bWrgbtm0=
Subject key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B5F4FDAD5618CFFFB2D1480E44073
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207171
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5f:4f:da:d5:61:8c:ff:fb:2d:14:80:e4:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:73:e8:72:c9:6c:50:80:4d:d5:91:98:97:
81:88:41:87:e2:09:7a:35:33:f8:2f:77:b3:cf:db:
ce:14:2a:ef:ac:53:d2:1e:ce:43:1a:d7:a9:ae:cf:
02:ef:0f:24:b5:a7:d1:cb:20:f7:da:16:c9:be:31:
74:f0:91:81:2d:32:c5:1c:7e:77:58:63:33:f0:d9:
11:b0:99:48:d4:f9:a2:e3:0b:76:cc:7d:13:7e:fe:
53:bb:70:ed:93:aa:27:b9:a5:0f:21:2c:5f:46:fa:
e1:6c:65:d4:ef:fc:eb:74:b5:49:88:59:5a:a1:06:
d9:25:3b:f2:1e:63:df:c5:b0:98:26:bf:0c:ef:a0:
eb:0b:65:84:a4:0a:de:36:cd:52:8c:7e:50:3d:d9:
5c:22:5a:7d:d9:3a:a4:2a:89:6a:a5:e2:86:da:fc:
b5:a7:5f:b2:b3:f3:0a:0b:5c:c2:86:d5:9b:14:6f:
b1:62:48:4f:0d:bc:30:c8:55:96:75:56:0e:b8:03:
95:66:0a:ed:8f:fe:05:80:d1:f0:ec:bb:94:bc:41:
60:2a:e4:b4:58:1f:00:27:75:5f:b6:0a:0f:46:cd:
05:d6:eb:3f:ea:05:11:80:96:8d:83:44:3b:e5:0d:
70:d7:07:15:7e:c9:57:52:00:0f:68:43:2f:bb:f9:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207171
Signature Algorithm: sha256WithRSAEncryption
8b:0b:d7:86:8c:d1:42:c5:ba:ad:f6:aa:31:74:07:2e:da:d2:
c2:13:2b:95:e3:ce:12:e5:80:c8:eb:a1:14:39:72:37:26:3d:
1f:e8:6e:b3:10:e2:e1:6a:ea:d1:d9:68:e9:d0:d2:2b:be:1b:
19:3d:7d:2d:d9:d7:94:de:a0:0c:cc:c9:bb:e7:82:94:36:3a:
b4:b0:73:06:b3:d7:a3:6b:c2:da:0b:d6:53:95:df:c8:f6:0e:
d5:45:20:dd:d9:3a:a6:02:e7:02:76:d9:57:ed:cb:1f:b6:7a:
e0:1a:0b:90:1b:e2:4e:86:e0:a3:8f:c5:e2:09:11:a3:e9:68:
28:57:ff:8a:e9:5f:df:d5:bc:71:ed:52:ea:d6:bf:99:cc:eb:
03:c8:35:a6:25:10:c4:5e:d6:27:c3:15:4d:4a:d0:69:07:01:
9b:93:23:fd:14:61:1a:c2:a4:94:74:72:53:8a:15:cf:70:e5:
96:46:e0:9e:b2:14:74:09:f3:a3:5a:7f:3c:24:17:76:cd:cc:
13:21:61:c5:24:86:42:6b:0c:1a:c7:8a:52:ca:92:75:08:24:
d6:cf:ae:a5:ef:20:a8:26:ae:29:62:ba:a2:e2:f9:7a:5d:d7:
ee:ca:7a:22:c1:fb:70:aa:60:52:24:43:d3:92:ca:f7:cc:c5:
d8:80:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:03 2024 by rpki-client on console-fra.rpki-client.org