Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
File: TjwBugxcvyCuPpPKPTeeYt9clZo.cer (raw, json)
Hash identifier: TsCK0YN9gasq4SQovLOCnTD5TtulR8s8u0HB1dR+kxU=
Subject key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B67625DCE1AD8F708D6A0C2C5B0353
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.132.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:76:25:dc:e1:ad:8f:70:8d:6a:0c:2c:5b:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:5f:98:30:4a:de:91:8b:b4:86:2f:f9:8a:
a4:62:52:da:2b:9c:93:0b:4e:49:c5:c0:00:05:4e:
bd:62:f3:66:67:11:6b:c9:a3:dd:f0:e3:89:2a:db:
0a:ce:f3:43:cd:20:73:81:1a:2d:dd:7f:9a:cd:58:
ad:bf:77:8e:ea:d8:af:4f:42:af:e6:2d:76:54:e4:
a7:5d:9c:54:3a:33:ea:15:d0:02:6e:86:ca:0e:3f:
36:82:6e:92:5b:a0:dc:c7:18:e5:15:3b:7f:1a:77:
18:7a:41:7b:35:f0:f7:f8:63:0e:e0:ef:90:ab:42:
91:c5:66:31:e2:c4:6d:4f:d8:36:85:c4:4f:58:cf:
5b:08:ff:60:1c:49:fa:89:58:97:8a:50:4b:df:6f:
ed:9e:13:40:5b:c0:c5:2d:ff:35:44:e8:34:0c:4e:
1f:e6:c8:51:52:6d:c1:50:c6:93:cc:a4:ed:42:6e:
fc:dd:bf:2d:ea:51:77:04:d0:66:0c:70:0b:be:a8:
3a:6c:c8:5f:4c:d8:c3:b6:c3:90:c5:0e:34:6e:51:
27:5e:3f:be:2e:06:9f:b6:4d:82:32:13:5f:02:55:
69:6f:6b:19:79:29:d3:99:87:8d:a5:1b:ac:de:bd:
ca:f9:c2:2b:48:cf:cf:01:5c:02:cc:ed:b2:43:8d:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.132.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:11:4f:fc:79:0d:c3:fe:85:dc:4a:40:e8:20:5e:63:b9:a2:
0a:f8:c7:49:e3:13:1b:af:4c:48:f2:71:53:63:f6:a7:a4:15:
dc:1e:6f:f6:06:12:de:bd:83:0e:34:a5:ca:3b:c0:5a:e4:66:
72:96:7b:8b:46:10:85:b5:0b:70:6a:ec:a7:19:22:c1:66:8a:
c6:90:38:15:93:68:58:8f:5c:63:72:d4:0c:ae:ed:47:0e:41:
5c:93:ae:45:f6:4e:d0:72:25:55:bd:e6:a7:51:57:f1:6e:09:
f3:57:43:db:1e:a6:0e:de:bf:11:f4:6d:45:f4:9f:eb:a0:f9:
68:6a:9e:0c:e0:53:15:7c:a1:2c:95:3e:96:11:93:9f:34:4e:
ec:05:27:c4:eb:10:c8:ef:fd:db:be:43:f9:52:0c:43:b3:e1:
2f:c8:1e:31:51:69:a5:83:f8:4d:aa:0b:d9:d8:c5:6d:d8:db:
32:ef:0f:49:3c:02:b9:95:a8:17:fe:cb:f3:9e:8d:ff:4f:76:
02:6b:49:2d:06:b8:fa:f5:1e:a4:a6:af:98:58:18:5f:2c:e0:
f7:17:50:25:f2:c3:29:68:60:4e:3d:02:8c:cd:03:41:d4:a8:
74:7c:00:54:3d:fd:62:7f:a0:d0:8e:bf:e2:9d:ac:66:89:97:
3c:10:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:05 2024 by rpki-client on console-fra.rpki-client.org