Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
File: tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer (raw, json)
Hash identifier: O5JqpJqIHbLhqyxlHiN43GFbug8ot/rILhsyUZ+fRgg=
Subject key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A9B41CB9C3448C706905C7B87A84DB80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
caRepository: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
Notify URL: https://rpki-rrdp.warpnet.xyz/notification.xml
Certificate not before: Mon 27 Jan 2025 21:39:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38168
AS: 199918
IP: 196.1.104.0/24
IP: 2001:67c:34::/48
IP: 2a04:5a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:b4:1c:b9:c3:44:8c:70:69:05:c7:b8:7a:84:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 21:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:06:49:97:b8:e4:e8:60:32:3a:ce:ae:c8:
ea:c8:b3:2e:ed:d6:14:ff:4a:f3:3e:6e:fd:c7:5c:
d6:e2:c0:6f:67:6f:89:14:a3:65:46:5c:b8:51:66:
6b:b5:97:1e:aa:e6:2f:3e:fb:0c:48:d8:ac:54:fe:
6d:6c:4d:ab:00:90:68:3b:5b:02:bc:50:07:7c:2e:
be:6c:b3:4e:5e:64:b3:e9:36:54:45:ea:43:bc:13:
59:05:27:d3:93:ab:aa:36:c5:76:8c:f8:b8:66:ce:
80:5f:63:ce:f2:a2:0a:21:35:20:59:39:de:36:0c:
b8:d9:42:15:a0:3d:f8:f3:1a:16:1c:43:23:1c:e0:
a1:70:27:5d:d3:4a:57:f7:ce:41:b5:72:33:68:7d:
ca:40:37:36:5d:3c:47:04:ea:73:e5:83:cd:83:4f:
3e:8f:50:f8:60:51:42:6c:5b:45:ef:aa:58:e9:76:
eb:df:3f:2f:c7:2d:8b:93:ff:31:d0:4b:bb:21:b7:
23:d6:f1:79:b0:7c:1e:c9:5f:c2:ae:9b:53:8c:ee:
33:5b:93:44:79:3c:ca:66:76:8e:27:6e:ac:34:61:
a7:7e:f1:24:67:1e:5c:c1:d1:03:5b:a5:c8:92:01:
27:f8:71:93:e0:32:0e:66:af:51:a1:e8:72:ac:be:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/
RPKI Manifest - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
RPKI Notify - URI:https://rpki-rrdp.warpnet.xyz/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
196.1.104.0/24
IPv6:
2001:67c:34::/48
2a04:5a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38168
199918
Signature Algorithm: sha256WithRSAEncryption
75:71:14:0c:38:72:a0:54:99:8e:8a:c4:d5:00:b3:16:3b:2c:
44:fd:f0:ab:95:9f:16:4a:5a:eb:37:f3:94:1a:5c:d5:e2:2e:
a9:b7:74:fc:0e:f6:0e:78:a3:0f:f7:8b:68:c0:aa:79:21:7e:
ac:2e:98:d1:f7:66:4e:c5:d5:b7:3e:bc:36:ab:81:48:74:8d:
a1:5a:81:aa:f6:24:21:14:03:48:ca:71:07:b6:fc:fd:fb:f8:
2c:1a:c3:3d:02:0c:ce:aa:e0:4c:2d:93:f0:2d:32:fe:09:b3:
cc:ce:e7:fa:e2:fa:64:b7:07:d8:45:fb:b2:3f:b6:68:e4:a5:
67:ac:ef:5e:56:53:5b:37:e8:69:81:87:9c:33:39:f8:c2:c7:
c9:c2:14:18:26:47:2c:0a:b4:27:03:76:37:d2:0d:60:36:e2:
1f:79:d0:44:05:d3:0c:7a:5f:1f:08:76:cd:58:96:61:f6:71:
2b:90:75:c5:37:bc:b0:65:fe:5c:e4:d8:47:14:89:c7:9e:e7:
23:63:24:73:f9:68:96:64:d7:cd:d3:7f:89:b3:e9:d9:f1:23:
a7:39:7f:b1:10:d1:3c:f6:61:25:9e:3e:a4:4c:d5:05:48:60:
fe:5f:ba:33:61:c6:66:43:dd:6c:ad:90:b1:91:52:bf:36:27:
98:3a:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:28 2025 by rpki-client