Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.cer (raw, json)
Hash identifier: BKUSgwxgnM8TxuLYgRA3mRq7ekOxgqbF+cXasRY4OTk=
Subject key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B91D5F9A099D3EF5966C22823D72E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60798
IP: 45.14.184.0/22
IP: 45.138.200.0/22
IP: 185.25.204.0/22
IP: 185.229.236.0/22
IP: 2a00:82e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1d:5f:9a:09:9d:3e:f5:96:6c:22:82:3d:72:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:2f:66:36:62:5b:a6:b1:14:39:79:b6:4b:
a0:5a:8c:5c:f2:b2:d8:27:95:7b:59:9b:e6:d9:a8:
06:c9:c0:97:6a:b1:18:af:4d:a9:58:20:95:1f:d2:
ac:9e:2d:5a:f3:e1:a0:36:a0:fe:96:34:f8:3a:9c:
3d:15:79:e9:16:3c:a3:85:35:97:f6:af:a8:f4:02:
ec:87:39:f8:4f:b2:18:d4:91:5c:44:b5:3a:5e:74:
87:a4:07:3c:79:24:7b:37:14:4f:60:68:18:87:2e:
bb:8f:e8:76:74:12:d7:d1:8d:17:e7:cb:3f:46:4b:
cc:9e:7d:59:a7:b2:45:63:c4:5e:83:b8:f0:c8:07:
13:a4:80:30:0b:72:21:73:3a:51:a6:8f:ae:62:89:
90:bd:e7:72:b1:4a:6d:a1:5b:42:9c:51:4f:91:fa:
c0:4e:16:74:73:30:98:e9:38:53:c0:8c:1c:2a:23:
e2:3b:33:c6:29:4c:aa:bb:34:0f:4e:97:52:40:e9:
30:91:b4:50:e9:89:2a:db:1b:0a:d0:71:98:01:fc:
14:5f:7f:d3:29:6d:95:af:da:a8:e2:ca:ab:68:8a:
d4:e1:eb:3e:be:7e:e0:ec:d1:ef:e8:91:ad:52:12:
a1:5d:2e:ff:4f:1d:0d:cf:f0:88:ef:99:5a:91:7d:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.184.0/22
45.138.200.0/22
185.25.204.0/22
185.229.236.0/22
IPv6:
2a00:82e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60798
Signature Algorithm: sha256WithRSAEncryption
13:4e:d9:5c:09:58:6d:72:d0:ba:3a:42:74:65:6b:4a:0e:86:
01:c1:8a:56:74:ea:82:2b:bc:16:49:95:43:4d:e1:f0:a9:be:
ba:71:ea:f7:0a:a3:60:bf:65:cc:57:dc:10:0e:4e:c9:c0:03:
3e:10:35:15:22:2a:52:20:97:63:4f:d6:17:12:16:17:bc:a1:
aa:9e:08:27:80:75:27:46:9b:66:75:29:35:cf:02:b8:58:87:
d4:89:5b:f7:7a:e2:e8:a9:b4:87:bd:36:d3:e1:7a:e7:87:51:
24:6c:99:bf:3d:e9:ec:7d:37:33:0a:da:2b:d9:c4:39:da:db:
ce:aa:f4:8d:ca:f0:be:30:63:ea:b3:de:b4:dd:2a:7e:4c:67:
f3:78:1e:4f:ee:30:6a:41:39:b9:31:f4:28:b9:79:27:13:2e:
5a:34:8b:27:8d:2d:46:ce:08:1b:92:67:89:ab:ff:e8:0c:0f:
ca:96:b7:32:89:50:a4:74:3e:0e:ef:9c:dd:9c:69:21:4e:12:
92:f7:35:25:e5:b0:48:2c:3d:66:c3:a5:76:14:bf:d3:48:c7:
ae:d4:3b:0a:f6:96:dc:6f:b5:6d:a1:44:d1:29:c9:7c:2f:91:
ed:3d:1f:43:ff:bf:30:ad:49:81:ad:be:83:54:f8:07:dd:18:
e1:ed:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:39 2024 by rpki-client on console-fra.rpki-client.org