Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
File: TkwTiahJ713MuDA3A7iYyR5j0U8.cer (raw, json)
Hash identifier: q4h7oJ6eGt2qTWPaBeyK767/kmFnfbwlk7e+VoF0Gvs=
Subject key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC09397EF4355BDCF7CF2CBAFC8017
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 152.89.220.0/22
IP: 2a04:e340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:09:39:7e:f4:35:5b:dc:f7:cf:2c:ba:fc:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:e3:a4:88:f6:3b:66:6c:c4:85:e8:38:5f:
f4:f2:c5:60:0f:31:72:a9:4a:4f:2e:02:57:0a:3e:
1a:1e:30:f2:5c:0f:7a:22:9f:96:5c:d4:9a:ee:69:
54:5e:0d:80:ad:bb:81:4b:a8:0f:9e:fd:6e:2d:56:
9f:f1:b1:b8:39:84:b7:4d:d9:bb:31:7b:91:4e:0a:
3e:f6:50:a8:ff:ac:34:56:1e:a3:a8:0f:73:2b:4d:
0d:d5:45:b7:77:99:6b:e6:25:ab:5f:a5:c2:4b:31:
7e:6d:35:f3:99:08:aa:58:66:ce:b3:ce:e7:ad:c0:
cc:a4:2d:7c:34:04:11:98:7d:c0:09:81:12:d1:f4:
d3:c8:7f:e7:cb:d0:f3:fe:41:8f:7e:db:7c:5c:de:
88:ff:f3:dd:81:a9:e6:69:c1:f6:6b:02:8a:f3:38:
9e:03:e1:56:e7:cb:05:98:5e:f4:02:f3:8a:d1:03:
a2:46:e9:78:cb:3d:45:72:26:29:ea:37:bd:bb:2e:
14:ca:5a:f2:d0:92:bb:fa:fa:d9:18:54:fc:ed:d2:
0e:e0:b3:27:f8:8c:41:8b:79:0d:0c:7c:70:11:a0:
3e:21:93:a3:56:1a:4b:1d:fc:16:f0:33:92:0e:3e:
b6:41:24:7f:9a:0f:a2:bc:3f:93:65:36:a1:9a:69:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.220.0/22
IPv6:
2a04:e340::/29
Signature Algorithm: sha256WithRSAEncryption
94:d9:ea:27:72:bf:3c:f9:ac:3d:c8:a8:fc:64:7e:0f:58:1e:
5d:cc:ff:fd:ec:53:b8:35:40:dd:d9:50:5a:75:76:7c:00:49:
77:64:6e:09:c6:11:1e:8c:7e:a7:e6:f6:51:b0:c1:3e:a4:69:
f7:d7:48:e8:f8:b9:7f:d3:01:32:0f:7d:7e:40:c3:59:47:06:
86:25:8c:0f:15:83:92:93:e1:c6:41:4a:f3:18:27:ef:ba:8d:
6f:7b:ba:33:a0:d2:bb:f9:19:86:ba:92:d6:4e:d1:b9:44:0c:
18:c0:3d:a2:a4:74:0f:79:e4:aa:e6:3b:c1:50:ae:6f:24:d9:
ac:ff:9a:3a:c8:11:6e:7b:d3:5a:1f:61:e8:0d:a4:64:4f:3c:
ce:69:56:77:cf:3e:b8:ac:27:06:0e:5b:33:f6:04:aa:59:27:
d5:ca:ef:8b:0c:cd:1e:bb:3d:5d:2c:f3:bc:80:c2:32:5e:3c:
91:e5:72:63:02:02:38:a7:20:ac:d6:89:16:2f:58:42:2d:34:
9d:77:a7:86:6c:ea:b5:ee:d3:f3:49:be:9e:3c:5a:b6:c9:60:
87:7c:97:7f:81:cf:6f:84:2b:59:b2:83:dc:80:d1:4f:e6:f6:
a3:7b:bb:cc:00:6b:cf:1c:4a:c1:8e:ca:2d:17:f6:0c:f0:76:
b1:d2:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:06 2024 by rpki-client on console-fra.rpki-client.org