Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
File: TuUnUqgb3-CkAfmiYdef7kthcRU.cer (raw, json)
Hash identifier: gwu/oAIOHFJK7aBi+DZ1Q/1aQoidjnkAEsF57oiiNJs=
Subject key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019150CA50DB559FCF2B23BBF122CDC160AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Aug 2024 12:08:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8303
IP: 149.219.0.0/16
IP: 2001:3880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:ca:50:db:55:9f:cf:2b:23:bb:f1:22:cd:c1:60:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 12:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:42:ac:05:86:b6:e1:b7:8e:e3:fd:e1:29:
e6:d4:83:94:37:ff:8f:47:ab:b8:c0:59:4b:bc:4a:
41:d7:8d:4b:7e:05:d2:85:28:b5:a3:cd:ef:19:3d:
d8:23:ed:75:f5:33:96:0d:7c:ed:18:b5:cd:1f:25:
fc:79:07:56:64:7b:a6:a0:1b:bf:b7:57:90:ea:f3:
4b:24:64:d2:5a:3c:0b:82:60:d6:84:ec:39:ed:8b:
57:25:ad:13:78:a5:fe:15:1d:59:d2:63:72:ed:85:
cc:25:cc:91:6e:8f:78:81:be:12:8c:23:37:4c:80:
39:3f:6b:61:a2:0c:91:2e:e1:f4:70:83:8b:44:de:
78:e7:0b:d9:fa:68:af:fc:b4:61:e8:a6:e2:95:d8:
de:9f:82:ae:f5:71:c1:eb:b2:3e:39:da:45:de:d7:
59:5a:89:27:81:ea:27:c1:56:b9:29:e1:5b:0c:ce:
71:8b:7c:f2:b2:e5:ca:3e:62:fa:2e:d2:d4:24:03:
5d:7d:c3:0f:f8:71:eb:46:fb:34:fb:bf:9c:13:4e:
20:d9:9f:da:81:8c:8c:ff:ea:8a:6c:cf:7f:79:b0:
5d:ca:57:c4:62:73:01:e2:dc:30:56:9c:88:0c:56:
09:95:9b:e6:d6:4b:fb:18:9d:94:5c:1e:2a:d8:91:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.0.0/16
IPv6:
2001:3880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8303
Signature Algorithm: sha256WithRSAEncryption
3f:f1:6c:12:38:5d:e8:75:16:47:77:e3:64:7e:b8:93:93:87:
50:85:07:9d:62:3e:39:ac:2d:43:1d:d3:8c:48:0a:70:d1:e2:
1e:ad:a9:bd:30:8a:04:af:a6:56:ca:ec:7f:f5:2b:3d:ec:71:
28:47:f4:ee:d0:14:1a:00:71:80:ce:67:0d:c8:a1:8e:86:75:
6d:44:f8:77:9b:4c:c5:12:50:71:f1:ca:63:25:95:9c:ff:37:
7c:7a:71:45:b8:66:b6:d0:0f:b0:59:10:68:6f:da:3b:96:2f:
ab:82:4e:3f:8e:f2:9d:dc:2f:d4:1c:87:ac:a9:55:71:22:ec:
7c:04:e7:3c:64:de:f7:eb:35:db:34:84:b3:49:a2:29:79:7e:
15:b8:1e:50:25:d7:9c:24:d7:57:b8:47:23:a8:29:31:ac:82:
b5:27:44:ef:e8:cb:c8:42:96:57:f8:b4:eb:d9:5c:f6:26:66:
6f:9f:28:43:79:c6:5b:9e:ae:40:61:50:50:12:c8:01:3c:97:
1d:af:ed:67:af:52:d8:fc:15:36:01:a3:8e:85:4b:54:53:12:
4a:31:4a:24:50:33:eb:05:c8:0d:20:d5:fc:3c:86:88:ee:ac:
d9:fb:30:80:dd:d4:06:45:e3:34:63:b9:99:97:cf:7c:6e:de:
95:49:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 09:03:07 2024 by rpki-client on console-ams.rpki-client.org