Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
File: TuUnUqgb3-CkAfmiYdef7kthcRU.cer (raw, json)
Hash identifier: csUYKz+40065kbKFHfleMOMrKiQI2JBEdxHCK+jjzQA=
Subject key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7458549AAA6C22ED071726FD893EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8303
IP: 149.219.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:45:85:49:aa:a6:c2:2e:d0:71:72:6f:d8:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:42:ac:05:86:b6:e1:b7:8e:e3:fd:e1:29:
e6:d4:83:94:37:ff:8f:47:ab:b8:c0:59:4b:bc:4a:
41:d7:8d:4b:7e:05:d2:85:28:b5:a3:cd:ef:19:3d:
d8:23:ed:75:f5:33:96:0d:7c:ed:18:b5:cd:1f:25:
fc:79:07:56:64:7b:a6:a0:1b:bf:b7:57:90:ea:f3:
4b:24:64:d2:5a:3c:0b:82:60:d6:84:ec:39:ed:8b:
57:25:ad:13:78:a5:fe:15:1d:59:d2:63:72:ed:85:
cc:25:cc:91:6e:8f:78:81:be:12:8c:23:37:4c:80:
39:3f:6b:61:a2:0c:91:2e:e1:f4:70:83:8b:44:de:
78:e7:0b:d9:fa:68:af:fc:b4:61:e8:a6:e2:95:d8:
de:9f:82:ae:f5:71:c1:eb:b2:3e:39:da:45:de:d7:
59:5a:89:27:81:ea:27:c1:56:b9:29:e1:5b:0c:ce:
71:8b:7c:f2:b2:e5:ca:3e:62:fa:2e:d2:d4:24:03:
5d:7d:c3:0f:f8:71:eb:46:fb:34:fb:bf:9c:13:4e:
20:d9:9f:da:81:8c:8c:ff:ea:8a:6c:cf:7f:79:b0:
5d:ca:57:c4:62:73:01:e2:dc:30:56:9c:88:0c:56:
09:95:9b:e6:d6:4b:fb:18:9d:94:5c:1e:2a:d8:91:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8303
Signature Algorithm: sha256WithRSAEncryption
79:3b:57:4c:fe:87:10:b0:87:48:75:0f:76:14:72:83:17:c5:
a6:1d:ce:7d:5a:b5:e0:cf:6f:8d:e4:cb:58:d9:db:f8:04:88:
e4:87:eb:15:e3:73:14:3c:f3:7c:33:8b:bf:81:49:60:fe:d5:
98:2b:d6:ce:83:46:08:ae:b3:06:53:25:83:e8:81:d4:f6:74:
6b:46:fd:a7:b8:cb:f8:d9:5b:ac:cd:86:08:8c:a5:22:4c:de:
ab:18:4d:25:f1:61:3d:d4:d6:54:c6:74:43:f7:95:c5:4e:2a:
d1:64:58:7e:c8:ef:8d:e1:b4:9a:ad:3d:d8:42:23:b1:4a:bf:
27:c2:2b:6f:28:d8:e8:46:5d:a7:c6:b6:a8:5d:e3:b0:6e:ce:
60:c7:f9:44:20:81:1d:bc:b2:25:34:9f:e3:cd:3f:43:72:fc:
d2:85:40:42:3a:4c:13:e3:5a:ff:ed:df:28:37:19:08:5e:fd:
89:6a:71:4f:fb:84:cb:3c:8c:b7:f2:55:4b:a8:60:da:53:0f:
9c:e1:f3:66:15:34:ed:55:42:cc:a0:18:c4:3a:2a:3a:fd:2a:
88:9b:2a:50:15:4b:4e:47:f3:61:c7:7b:aa:c9:e9:94:26:01:
04:cf:46:91:cd:0d:47:a1:eb:39:72:31:db:09:e1:71:4b:13:
ff:86:2f:ff
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYzDt0WFSaqmwi7QcXJv2JPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU1Mjc1MmE4MWJkZmUwYTQwMWY5YTI2MWQ3OWZlZTRiNjE3MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hCrAWGtuG3juP94Snm1IOUN/+P
R6u4wFlLvEpB141LfgXShSi1o83vGT3YI+119TOWDXztGLXNHyX8eQdWZHumoBu/
t1eQ6vNLJGTSWjwLgmDWhOw57YtXJa0TeKX+FR1Z0mNy7YXMJcyRbo94gb4SjCM3
TIA5P2thogyRLuH0cIOLRN545wvZ+miv/LRh6Kbildjen4Ku9XHB67I+OdpF3tdZ
WokngeonwVa5KeFbDM5xi3zysuXKPmL6LtLUJANdfcMP+HHrRvs0+7+cE04g2Z/a
gYyM/+qKbM9/ebBdylfEYnMB4twwVpyIDFYJlZvm1kv7GJ2UXB4q2JFomQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFE7lJ1KoG9/gpAH5omHXn+5LYXEVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzMxZTBk
NC0zNWNlLTRkMDItOTczNC1kNzhmYjk3Zjk4MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzFlMGQ0
LTM1Y2UtNGQwMi05NzM0LWQ3OGZiOTdmOTgyOC8xL1R1VW5VcWdiMy1Da0FmbWlZ
ZGVmN2t0aGNSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAldswGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
IG8wDQYJKoZIhvcNAQELBQADggEBAHk7V0z+hxCwh0h1D3YUcoMXxaYdzn1ateDP
b43ky1jZ2/gEiOSH6xXjcxQ883wzi7+BSWD+1Zgr1s6DRgiuswZTJYPogdT2dGtG
/ae4y/jZW6zNhgiMpSJM3qsYTSXxYT3U1lTGdEP3lcVOKtFkWH7I743htJqtPdhC
I7FKvyfCK28o2OhGXafGtqhd47BuzmDH+UQggR28siU0n+PNP0Ny/NKFQEI6TBPj
Wv/t3yg3GQhe/YlqcU/7hMs8jLfyVUuoYNpTD5zh82YVNO1VQsygGMQ6Kjr9Koib
KlAVS05H82HHe6rJ6ZQmAQTPRpHNDUeh6zlyMdsJ4XFLE/+GL/8=
-----END CERTIFICATE-----
Generated at Fri May 3 11:33:58 2024 by rpki-client on console-ams.rpki-client.org