Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer (raw, json)
Hash identifier: 7luPRupMZ30gTJvnhkASsBoCQTntOauKmUHTV1RoP58=
Subject key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AC3A99CB60F9A5CAA7D1BD851C89B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.41.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c3:a9:9c:b6:0f:9a:5c:aa:7d:1b:d8:51:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:32:cb:b8:32:ae:b2:4b:72:a6:c2:cb:fe:
33:fd:b7:7b:19:30:ab:5f:f0:f8:4f:86:dd:3a:74:
0d:11:fe:90:12:39:08:fb:93:8e:80:59:9b:7e:2c:
07:0f:13:29:4b:b7:12:00:0a:e9:77:fb:af:60:92:
5e:c2:56:16:c1:33:c9:a8:cd:95:36:8d:fa:ce:d5:
9b:79:38:af:b4:a0:37:6e:06:48:4a:0a:66:35:de:
03:da:00:99:98:b8:42:01:da:0a:77:d1:d6:05:45:
5c:d8:74:2b:7f:ac:88:3b:9e:de:c1:a1:73:e9:77:
89:78:d8:b3:01:86:77:75:e3:ce:c2:31:73:35:0b:
d1:c6:25:1c:c1:fa:72:39:ff:f0:50:fd:76:41:56:
53:35:42:ce:84:8e:3b:ab:0f:d1:ba:a3:1d:de:8c:
79:0a:67:7e:c1:77:c7:8f:b1:e5:5e:80:e4:82:c9:
cd:8e:27:04:9a:2b:93:00:c5:c9:53:d2:62:65:97:
f7:e2:6b:cb:5c:5c:ba:97:4f:66:7c:59:4a:2d:8e:
01:c3:d3:0c:f4:56:33:a5:ec:0d:d5:13:eb:94:c3:
69:eb:f1:c7:1f:7f:94:f5:04:92:60:c9:70:65:79:
8b:8f:05:d6:45:fc:ad:b3:e3:aa:be:ac:62:8f:2a:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:44:2c:5e:4c:9d:56:b9:cd:73:44:29:ce:74:00:9e:20:2a:
70:46:88:85:ac:28:a1:3f:05:0a:6e:29:40:b5:07:20:79:9c:
d3:b0:47:a6:1b:a9:e9:e5:0d:e1:7c:f2:d7:78:64:c8:1f:e1:
8c:4f:6d:e1:33:42:f8:1b:f1:65:1a:3f:b0:18:e6:f1:e9:81:
6f:e6:4d:2e:2f:40:3d:9b:df:8c:db:fe:5f:f5:42:f6:c9:6f:
d3:f9:ba:ac:c6:28:18:fc:4e:17:89:99:d5:a4:57:bd:ea:50:
ca:4d:7d:e9:ec:c1:71:cd:ee:f1:8f:80:4c:f6:4a:85:cb:d1:
b5:20:e5:e2:35:9d:d2:b2:c8:38:9d:7c:e7:75:0b:b4:3f:79:
f1:cf:d8:b6:30:d8:8f:a1:39:e0:5d:38:42:cd:60:7e:d5:69:
71:5d:6a:01:bf:94:ca:1f:8b:22:0b:1f:79:45:4e:7c:1c:8c:
10:ce:d2:b1:53:0b:bc:f6:15:20:cd:fa:ca:f0:02:66:f5:43:
57:98:47:08:da:ac:f2:4c:10:c5:ae:e8:ed:45:3a:ea:31:ec:
55:cf:31:3d:bf:a3:88:0d:22:15:50:c4:58:fa:b8:70:c1:4d:
83:ae:94:3c:06:6c:08:a9:ba:55:ed:b5:9f:3d:44:cd:2d:e6:
74:9c:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:17:02 2024 by rpki-client on console-fra.rpki-client.org