Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
File: TuwmeuLxv5Xm16FCCA5d96MTlJI.cer (raw, json)
Hash identifier: oTA1ERFic5CRbwBst2hxINV9qKImSjZ7pdK8/U7xvZ4=
Subject key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC9A8F7EE68D8E41545B9C70A1158A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28759
IP: 193.138.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9a:8f:7e:e6:8d:8e:41:54:5b:9c:70:a1:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:3f:a0:1e:81:24:8a:73:3e:2e:24:d0:e2:
52:21:cc:6a:db:27:04:a0:25:db:6a:27:46:68:30:
58:99:be:dc:2f:ba:19:91:c7:ea:37:fa:82:86:4b:
45:05:d0:83:e4:9c:ec:14:92:08:8d:b7:a4:aa:66:
0f:85:6d:d5:2f:d0:22:6b:bc:f8:c1:de:22:96:3f:
e9:0e:ff:1f:90:af:3b:77:e5:2f:2b:6a:31:23:75:
67:9e:5c:46:4a:81:75:69:61:79:62:c5:38:8e:4a:
84:c6:9e:b3:0a:0a:65:71:7d:2f:a0:6a:f0:ab:20:
39:03:d2:63:bb:5b:6f:d0:fe:fd:bf:94:f7:0f:67:
62:fc:1b:e6:97:dc:e2:fd:b8:d1:a4:c9:96:fd:11:
69:71:92:43:7a:07:4b:ab:14:2f:cc:fa:f1:03:cf:
07:5d:04:89:9b:bf:ab:ea:7a:03:f6:ea:15:55:25:
e7:8e:66:2a:34:07:76:54:63:f0:bf:1f:98:36:08:
cd:7e:fd:74:b9:08:a7:32:46:f0:f1:59:e4:9d:4f:
b2:1e:af:e6:fe:49:56:b1:c5:72:72:c8:2c:8c:1e:
03:80:2c:73:41:82:01:b0:40:57:b4:0c:af:71:21:
ea:40:7e:2e:4e:91:75:61:87:07:ed:84:e3:0a:ca:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.66.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28759
Signature Algorithm: sha256WithRSAEncryption
4c:91:8e:1e:86:e1:eb:65:49:26:80:c2:ca:b6:07:2c:04:12:
58:b9:de:11:94:49:d9:37:24:97:ee:79:8c:34:7d:35:76:0b:
84:30:c5:c9:51:66:8d:39:a6:9a:69:c7:99:87:c2:15:5d:fc:
d1:ae:f3:d5:64:83:1a:e9:68:66:77:dd:97:11:c2:78:86:7f:
43:ae:00:f3:fc:a3:62:b8:39:86:9a:13:01:cf:dc:ff:27:47:
ce:0f:84:44:d3:c3:38:30:b8:19:1b:30:c7:f8:ad:10:af:79:
81:b4:83:00:76:f0:f8:41:93:62:e1:2b:82:7a:c4:ab:82:49:
cf:0c:0c:37:36:14:8e:a9:fa:4a:9e:a8:3d:74:c0:b3:bf:ca:
70:b3:63:32:bb:ab:82:1a:40:74:c8:34:27:7f:c9:2a:95:02:
97:68:8e:77:61:02:c8:d1:63:d7:3d:18:f2:c4:28:10:2b:0f:
37:1b:db:fc:ce:17:c7:16:41:7d:52:60:4c:91:48:aa:4b:19:
3e:d8:78:51:9f:43:67:be:88:a4:5f:1d:46:be:61:20:9a:d1:
31:a6:5e:06:b9:6b:20:79:20:b4:6e:11:54:af:73:99:0a:41:
ca:e2:f7:61:f0:32:31:bd:2c:34:19:1c:5d:11:03:c2:7e:11:
7d:8f:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:31 2024 by rpki-client on console-fra.rpki-client.org