Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer (raw, json)
Hash identifier: DKw5kpjVf0enhWq1oF2IjNMVgNzJSUxSFB46802Wvos=
Subject key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB02A7B02288EF11BF0E259AAC1210
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204079
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:02:a7:b0:22:88:ef:11:bf:0e:25:9a:ac:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:a3:39:c8:99:aa:25:75:09:90:fa:72:11:
df:79:4a:10:f1:28:94:3b:17:02:3c:b9:bf:8f:2e:
e0:c7:aa:4e:b2:44:e8:b4:90:b4:6e:0d:90:f1:a2:
58:63:db:94:9c:e1:e4:8c:3c:a2:88:16:58:88:f8:
dd:83:ed:ab:2c:88:b5:e5:d1:34:7f:25:c3:61:d4:
17:4a:57:a2:b9:bc:75:0a:9e:bb:f8:db:ad:bc:38:
3f:df:b7:c1:fc:86:4a:ed:dd:2f:3f:a4:6c:38:fc:
b7:8b:7b:f3:e6:60:b3:f0:9f:6b:e5:a4:8b:b8:94:
d7:4f:1e:c0:df:c3:ba:8c:40:5b:26:fe:eb:6d:ae:
5c:c8:21:d9:53:cd:d1:a5:24:d8:5a:60:91:69:b6:
32:14:bf:72:22:5e:92:d0:e6:dd:81:48:d4:fb:cf:
f4:ef:45:9d:29:63:d6:55:91:54:10:be:63:7c:a4:
33:f3:98:da:b9:9e:bd:02:69:32:fe:f8:58:08:35:
a1:8b:85:1c:b4:a3:c3:b6:31:be:52:ad:03:35:44:
26:b7:38:53:f6:89:d9:44:b4:39:62:b5:de:c7:a5:
54:7a:dc:db:c1:1b:ea:56:99:80:33:88:50:4d:98:
9c:f5:e7:27:b9:b0:94:2d:bf:0f:ca:e0:4b:24:d0:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204079
Signature Algorithm: sha256WithRSAEncryption
17:bf:59:d5:ab:45:90:49:0c:ee:d5:45:10:c6:a8:bc:ac:64:
17:2d:ee:9f:55:ee:97:76:a2:fb:6d:06:fa:f4:02:a9:b2:d1:
8d:78:0a:fd:13:c6:c2:aa:1b:7a:7b:3e:df:96:22:57:a6:a6:
7d:7c:d6:c2:d3:ab:51:24:d5:fc:3b:7d:7f:1f:d1:7e:6f:ef:
2e:f1:98:d1:fd:e6:92:73:ed:e4:94:f7:0b:d5:c0:6b:89:a8:
a8:c7:60:aa:1e:c2:aa:64:59:54:dd:5b:99:26:dc:50:88:61:
a2:61:7e:01:88:67:46:68:af:54:01:3d:40:ac:5e:d8:63:dc:
af:a2:c5:05:5a:6c:f5:2e:43:a2:e6:0b:39:99:5e:a4:e9:6a:
3c:f9:ed:c9:0d:39:1e:f0:39:47:7c:1c:49:3b:07:29:c7:a6:
ce:9d:40:ac:7b:f6:54:4e:2a:b8:67:18:6c:29:69:2a:e8:11:
d0:12:d9:0f:8e:d9:19:88:93:0f:1d:0d:31:07:f4:81:1b:7d:
4b:24:88:0d:d5:8b:e9:33:36:2d:be:42:dc:ed:70:2c:13:84:
20:e1:a0:89:22:c2:ee:b6:0e:f7:6b:7f:df:03:c0:6f:e8:56:
7f:4f:e6:81:10:62:4b:ee:0e:03:59:23:c1:7e:19:7f:78:b4:
4d:8b:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:17 2024 by rpki-client on console-fra.rpki-client.org