Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.cer (raw, json)
Hash identifier: +xQ+NdbtwxhXIhLbIdtP4CKDvyt3vr0k3pFZZEH6VAo=
Subject key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6FDAFFB8B9EB2A86166B265C4744D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.135.190.0/24
IP: 216.170.113.0/24
IP: 216.170.115.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fd:af:fb:8b:9e:b2:a8:61:66:b2:65:c4:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:90:51:eb:b5:f7:62:50:ce:7f:a7:4f:97:
e2:33:bc:e2:95:bd:5c:25:2c:ef:f7:2e:53:46:15:
23:cd:35:e6:c0:5d:06:b1:94:44:56:bc:fe:c8:1c:
c2:4c:48:48:59:0a:db:d2:88:91:0a:cc:bd:10:d2:
5b:87:4d:1f:df:0f:13:e5:b0:53:1b:7a:52:34:86:
5a:83:6d:1d:b0:7b:6f:15:d5:09:b0:b2:a3:92:5c:
5c:6c:0b:3f:73:41:07:85:29:fc:05:a2:db:d1:b7:
23:76:74:7c:f8:d9:fa:c4:d0:61:ad:76:f9:d0:e5:
2d:36:3f:0b:50:f5:55:a5:72:82:e8:1d:42:9b:96:
df:d1:79:02:ad:30:b5:96:b8:d7:b7:6c:3d:34:8f:
39:32:81:cd:11:8e:b2:69:0b:db:f1:a7:c8:29:9b:
ce:49:b0:e8:c9:9f:12:1c:fd:79:c8:9b:44:64:4a:
00:85:00:36:22:90:58:b5:d5:1a:39:c3:ee:c4:14:
92:b3:a0:c7:66:80:e6:ce:c3:6d:86:bc:e5:00:33:
4c:03:5a:63:04:af:0c:87:08:6d:2c:a0:c3:1a:bd:
0f:d2:ed:b9:a8:87:a9:28:42:e4:f7:d1:0e:fb:87:
46:03:32:e6:19:24:b5:6d:15:c7:57:39:c9:85:32:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
216.170.113.0/24
216.170.115.0/24
Signature Algorithm: sha256WithRSAEncryption
76:17:9f:72:a7:01:fa:8f:65:44:53:8b:b4:02:b6:a9:6d:98:
dc:6d:94:b2:5f:21:88:35:f6:ba:e9:c0:04:b4:90:4a:14:13:
9d:b2:53:09:71:6f:5e:43:71:db:e1:23:2a:48:42:f5:8c:b0:
c4:53:b6:9d:b3:7c:70:a3:c2:de:54:6a:3c:e6:41:91:3e:05:
02:02:5d:97:85:2d:77:9b:1c:09:42:dc:6d:23:17:35:29:d5:
2b:c4:b1:8f:16:05:c8:55:65:f7:f7:c7:6f:56:2a:54:f4:fa:
61:fd:ae:69:0a:ef:e4:6a:4d:7b:e4:39:ae:74:0f:ff:cd:72:
f4:fc:b7:2a:82:89:c0:fe:36:75:6c:30:4a:d6:1f:f3:41:88:
23:26:41:97:1a:54:4d:15:a0:bb:6f:ff:b8:cb:23:a5:80:ea:
3b:5d:9e:e4:6b:b3:81:31:f1:94:64:ad:03:47:40:70:b3:7c:
ca:09:d9:67:6f:e1:09:05:9d:b9:25:99:b0:7b:6c:ca:7c:d6:
46:d1:81:79:d5:0e:ed:e0:41:ea:7c:cd:b2:33:69:a7:8d:cf:
a5:5a:9c:88:76:17:f0:ff:50:95:3e:68:d8:81:5f:d4:1a:36:
b6:a9:b9:79:54:9f:18:33:9a:2c:25:24:a2:99:56:a8:95:6f:
17:0b:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:33:54 2024 by rpki-client on console-ams.rpki-client.org