Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer (raw, json)
Hash identifier: uOEf8oqk0I3yzP6F9qQ547Mu//yc84guvyp9Wd8E+84=
Subject key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942746D51CD693C69C46F187E77C5CDA09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204079
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d5:1c:d6:93:c6:9c:46:f1:87:e7:7c:5c:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:a3:39:c8:99:aa:25:75:09:90:fa:72:11:
df:79:4a:10:f1:28:94:3b:17:02:3c:b9:bf:8f:2e:
e0:c7:aa:4e:b2:44:e8:b4:90:b4:6e:0d:90:f1:a2:
58:63:db:94:9c:e1:e4:8c:3c:a2:88:16:58:88:f8:
dd:83:ed:ab:2c:88:b5:e5:d1:34:7f:25:c3:61:d4:
17:4a:57:a2:b9:bc:75:0a:9e:bb:f8:db:ad:bc:38:
3f:df:b7:c1:fc:86:4a:ed:dd:2f:3f:a4:6c:38:fc:
b7:8b:7b:f3:e6:60:b3:f0:9f:6b:e5:a4:8b:b8:94:
d7:4f:1e:c0:df:c3:ba:8c:40:5b:26:fe:eb:6d:ae:
5c:c8:21:d9:53:cd:d1:a5:24:d8:5a:60:91:69:b6:
32:14:bf:72:22:5e:92:d0:e6:dd:81:48:d4:fb:cf:
f4:ef:45:9d:29:63:d6:55:91:54:10:be:63:7c:a4:
33:f3:98:da:b9:9e:bd:02:69:32:fe:f8:58:08:35:
a1:8b:85:1c:b4:a3:c3:b6:31:be:52:ad:03:35:44:
26:b7:38:53:f6:89:d9:44:b4:39:62:b5:de:c7:a5:
54:7a:dc:db:c1:1b:ea:56:99:80:33:88:50:4d:98:
9c:f5:e7:27:b9:b0:94:2d:bf:0f:ca:e0:4b:24:d0:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204079
Signature Algorithm: sha256WithRSAEncryption
ae:7e:7b:b7:20:47:28:b5:ff:c7:b0:93:01:a2:f4:2d:53:16:
22:9d:c2:6c:42:4f:4a:1f:3d:1c:9f:95:c8:84:33:7b:b4:3d:
c3:92:ed:2e:68:fc:6c:99:d6:30:bf:e0:f0:bf:b3:e0:81:07:
6f:8e:a6:19:0d:8a:40:a8:0c:91:27:9f:df:c3:50:d1:2e:97:
17:7b:c0:4d:74:89:40:d9:3d:1f:a6:b4:b9:54:09:33:5d:c3:
e1:b1:15:c6:ee:3f:fe:1d:e3:56:c2:37:9a:b2:9b:88:9b:81:
4d:69:ca:5f:f5:60:4c:48:37:22:c5:8a:a2:61:98:7c:51:ae:
64:56:4b:dc:11:9c:4e:f3:c9:aa:9c:51:60:da:62:e7:ef:34:
10:53:ec:05:d5:cf:a8:9c:13:2f:ad:61:d4:7f:ea:c6:0b:8c:
97:c4:18:84:d9:03:61:2c:0b:87:07:35:ca:e1:92:23:b8:2c:
a6:22:c6:95:e6:73:87:82:14:d5:a9:f0:d7:aa:7e:e7:de:37:
b0:29:55:5d:15:7c:6c:8a:26:0a:4e:96:9b:01:01:de:f5:c8:
6b:82:77:d1:3d:29:72:a5:05:5d:f1:ff:98:b5:58:9b:e3:e7:
fe:17:99:33:ac:22:a2:bf:69:db:8b:ce:f1:a0:ad:80:72:1b:
71:39:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:49 2025 by rpki-client