Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.cer (raw, json)
Hash identifier: 5ExnPbFlYUL/iSEDPQFP2U4NSqqexLmxGo3mL9OSiVw=
Subject key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAD3F9DE30D8805A54131487289A6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35401
IP: 87.244.0.0/21
IP: 87.244.16.0/21
IP: 87.244.32.0/19
IP: 185.138.160.0/22
IP: 217.170.112.0/20
IP: 2a02:26e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d3:f9:de:30:d8:80:5a:54:13:14:87:28:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:74:86:3e:35:35:cb:44:95:fc:e4:e4:b4:
59:81:c9:f5:1d:36:f4:0c:9e:1a:d2:f9:ff:91:62:
1b:ea:3a:fe:1b:a3:53:ec:24:f0:d3:3c:b9:f9:22:
a8:82:2b:15:25:c0:a2:c9:3d:41:9f:da:6f:db:22:
a2:c2:2d:5b:35:a6:0e:26:ba:0f:7c:03:86:fd:68:
ef:42:03:d2:ef:16:62:95:5a:4a:fd:88:ff:fe:55:
e4:54:67:9a:2f:41:9d:86:e0:eb:17:d0:b8:9c:19:
41:95:6a:d8:d1:d7:5e:a5:bf:f8:dc:f5:3e:14:a2:
d5:39:16:94:62:5b:5f:51:3a:f1:f7:d0:b6:1c:11:
8f:c0:02:b3:9e:b9:a3:fe:fb:78:c6:9a:83:b8:6f:
27:a5:a5:73:9d:07:7f:37:99:85:91:6b:9e:aa:bd:
6b:e2:30:dc:85:b8:9a:79:d9:a9:e1:1c:e9:cc:be:
1c:ed:7d:68:c1:fb:f7:39:a7:2e:92:95:f4:99:cd:
48:f7:65:85:1b:6c:3c:e1:f5:d7:26:00:1d:fb:bb:
ab:e7:41:2d:de:6a:7f:5a:d7:63:72:ed:76:01:2b:
61:72:35:f0:45:fd:fc:ca:c1:a3:16:13:80:ec:1b:
75:31:24:89:ed:8e:fe:5c:c4:90:18:5b:ec:9c:23:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.0.0/21
87.244.16.0/21
87.244.32.0/19
185.138.160.0/22
217.170.112.0/20
IPv6:
2a02:26e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35401
Signature Algorithm: sha256WithRSAEncryption
64:08:98:c3:4e:74:34:ac:d5:5f:1a:c5:62:e9:33:4c:db:56:
70:e5:a6:78:96:60:0d:c2:d1:b8:13:32:ce:35:ef:9b:dd:de:
74:be:e2:ff:b1:95:8e:dd:b7:c5:2a:89:a0:0e:b9:63:e6:49:
8e:d9:50:7b:91:de:0f:d6:97:8f:5d:55:d7:9c:48:c2:cd:35:
5d:d8:95:c2:dd:e7:fd:41:ff:94:ae:f3:80:f4:ca:9c:1a:ba:
40:f8:7b:0a:c7:ad:54:f5:c6:8a:5e:97:8c:87:0d:08:8b:8a:
80:03:07:12:79:dc:97:81:72:37:ec:f8:8f:77:9f:91:81:13:
e1:40:97:85:ef:85:a2:51:cc:6d:7d:7c:6c:c0:fb:71:c2:05:
53:b6:5b:04:52:9e:04:a1:72:de:a6:e2:bf:62:19:ed:84:aa:
3a:10:ae:16:6f:0d:7e:a1:dd:41:5d:66:85:3b:65:e2:09:50:
61:e0:fb:25:60:b4:bf:ea:5f:50:d5:bd:62:f0:93:8a:67:f6:
bb:5a:31:65:51:c8:13:ac:1f:a0:f6:15:e1:4a:e5:81:46:74:
f2:28:32:cb:b3:d4:b7:ff:26:8d:e4:0c:11:a8:f5:44:11:2e:
b2:d3:51:e1:17:11:f6:cc:09:06:ac:db:f3:9a:4d:9c:9a:54:
12:07:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:46:17 2024 by rpki-client on console-ams.rpki-client.org