Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.cer (raw, json)
Hash identifier: XU79iGTsQni4rxHkJIT4yZLCyf8QZ+IdTimOGYgPniY=
Subject key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B07E78FA6838F21C3F5F3A0A938AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199392
IP: 2001:67c:c28::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:07:e7:8f:a6:83:8f:21:c3:f5:f3:a0:a9:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e340187c0fce5fff037ced9a6508243e404da71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:41:68:5b:1f:aa:59:a7:71:d9:e2:8c:74:
d4:22:8a:55:d0:cc:c7:b4:ce:a8:e2:87:e7:18:81:
bd:44:78:23:04:22:2b:a5:9c:da:71:c7:2a:d7:f6:
26:50:aa:b4:9f:8b:63:fc:f9:0e:b8:e1:4e:21:38:
3a:5e:e9:a2:ee:7f:b9:84:34:94:f5:0b:7f:df:75:
67:4e:37:5e:04:ec:a5:79:fe:53:7e:a1:99:ea:b5:
21:1f:f7:3b:da:ca:3c:71:e6:bf:20:a0:a2:f7:a3:
65:af:8a:1d:22:81:3c:2c:3e:13:a8:ff:8c:8b:91:
e4:9d:29:12:ac:de:a1:0d:f8:c7:24:69:bc:ff:ae:
e8:57:c5:29:c4:58:37:25:c6:d1:0f:b8:63:bd:6b:
7d:83:d5:36:ac:83:36:b4:cf:96:dc:f5:4b:42:5d:
c3:29:ec:9f:96:ca:f9:2e:c5:31:43:8f:86:24:46:
a3:ec:8f:28:ad:92:79:38:85:67:21:36:d5:38:32:
b6:aa:5e:a6:a2:b3:ed:75:f1:40:4c:dd:4e:c9:b7:
18:b9:1e:bb:74:5e:44:7b:99:22:c6:a0:3d:d5:5b:
32:30:6f:d9:cc:ee:18:d0:2b:e5:63:69:ba:a6:e0:
49:12:4a:1b:60:d4:82:4a:cb:0b:e9:ec:57:82:c3:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c28::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199392
Signature Algorithm: sha256WithRSAEncryption
61:ff:25:9d:18:3b:a1:6a:02:0a:4d:47:c2:e4:ea:e8:90:b2:
f9:5c:e5:92:49:af:8d:94:a3:69:fe:c9:f2:0e:5b:37:f8:33:
13:de:28:c7:c8:05:ce:d8:0f:94:91:e5:f2:53:9b:cc:a0:3c:
39:df:93:1e:55:8c:2d:46:e5:50:85:0b:f2:15:d7:82:3e:a1:
4e:73:c9:bf:dd:72:a0:e5:b9:2f:18:57:a7:2f:a3:55:e6:86:
74:90:d1:30:51:f4:8c:3d:53:83:99:d6:42:70:23:a2:ea:6b:
1e:41:d9:94:84:b2:a2:7a:0c:dd:80:42:37:5a:5e:aa:c3:4d:
10:d7:ef:98:a8:07:ba:af:49:64:86:95:8c:e6:3e:95:09:2e:
55:fd:90:e6:df:3f:7b:df:ea:4e:b1:35:42:18:32:88:b1:32:
b0:0e:88:52:10:9a:2b:2b:d0:67:aa:5a:df:87:5d:2b:c7:f0:
07:b9:55:87:4e:7e:a7:f1:eb:e0:bf:e3:a1:6b:87:7d:41:64:
f9:ed:62:99:93:11:4f:d1:d3:94:3f:6e:8d:b0:f8:16:ae:5d:
fc:b2:f5:58:03:32:0c:e6:f7:88:36:2e:91:99:74:9f:db:b4:
fc:b6:89:ad:85:cd:0c:9a:ae:e5:73:9f:25:d1:f6:91:e0:72:
4a:d1:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:05 2024 by rpki-client on console-fra.rpki-client.org