Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
File: tTRCGKSIC1AMAzMh52vXi088Flg.cer (raw, json)
Hash identifier: RXDQT/20uJ64CsaesIpGNPLyrnyelBzWRxE7IW74hnw=
Subject key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8710A655F9AB0EB8EBE3CB34865274D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34615
AS: 61320
IP: 192.109.30.0/24
IP: 192.109.37.0 -- 192.109.38.255
IP: 192.109.47.0/24
IP: 2a0f:6c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:0a:65:5f:9a:b0:eb:8e:be:3c:b3:48:65:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:e9:d3:19:19:46:0e:18:aa:c1:40:53:e6:
0e:4d:33:9c:a2:4e:57:82:52:37:e1:35:f2:0f:e0:
eb:46:85:a7:61:79:be:35:9b:b0:c4:f7:95:b7:47:
ac:d0:67:61:7c:12:cc:1a:bc:51:90:b3:30:af:81:
2f:79:c5:f3:ba:64:4f:30:6a:53:2b:e7:54:71:25:
77:10:49:d7:33:51:a2:2a:cd:e5:2a:c1:10:50:3d:
2f:ee:aa:b7:64:b4:c9:8d:5c:63:5e:6d:90:cc:84:
c1:07:d1:db:3d:73:db:20:f8:ad:14:9d:23:71:10:
df:73:2d:97:b6:95:0e:29:bd:33:ff:10:3e:fc:3c:
34:4c:90:ba:62:87:a8:14:82:a6:ef:24:cc:9b:c8:
29:80:b1:cc:8b:42:52:93:59:f3:59:5f:1f:c1:8e:
fa:ed:1d:ea:9c:81:26:e8:3a:6a:1d:9c:42:0a:cb:
e1:61:b9:f0:e3:e5:67:79:25:7a:2d:db:db:c1:d0:
bc:b1:45:ac:50:7d:99:60:a0:fa:4d:5a:71:35:6b:
8b:d8:42:97:b5:ff:55:16:14:b7:ee:59:5f:56:06:
c9:58:6e:3a:c4:4f:91:70:90:1a:9a:4a:cc:0b:59:
b7:b6:9e:9e:e3:67:3c:10:2e:3e:cd:9b:41:92:62:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.30.0/24
192.109.37.0-192.109.38.255
192.109.47.0/24
IPv6:
2a0f:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34615
61320
Signature Algorithm: sha256WithRSAEncryption
89:13:18:ef:18:01:dd:db:dd:11:08:d7:f2:d4:18:25:17:5a:
52:e1:59:46:19:54:da:5b:c6:63:eb:f1:a4:ec:e5:77:b1:51:
5d:18:7c:6b:f9:01:cf:a0:1a:df:9c:f5:19:c8:1e:81:41:53:
6f:21:1a:c1:7f:63:50:91:a1:b4:d2:f1:cd:6e:f1:f8:f9:dd:
e9:41:2d:0d:e6:f4:5b:01:73:0d:ee:16:0d:09:db:4d:1b:2e:
ee:af:2f:af:13:72:2c:21:46:e4:85:d3:dc:30:53:b2:11:26:
4c:4c:72:d7:d6:4f:fc:05:5c:5d:1b:8e:1f:1a:ef:11:d4:3e:
34:23:eb:4b:e0:ce:0f:37:1f:20:bc:5c:6d:35:0b:48:a8:7f:
4f:7e:22:ae:c5:f4:43:27:89:6f:00:82:c7:d4:e1:76:fa:ff:
97:e6:5c:25:b0:80:e2:75:02:24:43:6a:55:ae:51:f7:da:b1:
89:86:71:6d:ce:dd:94:34:ce:12:9d:5e:b5:0b:a2:0e:4e:01:
c3:7e:70:1a:8c:82:44:b4:00:dd:7a:a0:f0:44:bd:fd:e4:8a:
3a:7e:d7:e6:57:b9:b7:aa:0d:04:0b:4c:80:dd:13:d9:3c:c5:
c2:93:cb:7b:9d:27:c4:d0:43:cc:81:f0:b9:1d:b6:77:df:a6:
7d:34:0a:14
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYzIcQplX5qw646+PLNIZSdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTM0NDIxOGE0ODgwYjUwMGMwMzMzMjFlNzZiZDc4YjRmM2MxNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4rp0xkZRg4YqsFAU+YOTTOcok5X
glI34TXyD+DrRoWnYXm+NZuwxPeVt0es0GdhfBLMGrxRkLMwr4EvecXzumRPMGpT
K+dUcSV3EEnXM1GiKs3lKsEQUD0v7qq3ZLTJjVxjXm2QzITBB9HbPXPbIPitFJ0j
cRDfcy2XtpUOKb0z/xA+/Dw0TJC6YoeoFIKm7yTMm8gpgLHMi0JSk1nzWV8fwY76
7R3qnIEm6DpqHZxCCsvhYbnw4+VneSV6LdvbwdC8sUWsUH2ZYKD6TVpxNWuL2EKX
tf9VFhS37llfVgbJWG46xE+RcJAamkrMC1m3tp6e42c8EC4+zZtBkmI4qQIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFLU0QhikiAtQDAMzIedr14tPPBZYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2QyODJi
ZS03Y2E1LTQwMGYtYmU4NC1jZmFiMTBkMzA2OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZDI4MmJl
LTdjYTUtNDAwZi1iZTg0LWNmYWIxMGQzMDY5My8xL3RUUkNHS1NJQzFBTUF6TWg1
MnZYaTA4OEZsZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaAwQAwG0eMAwDBADAbSUDBADAbSYDBADAbS8wDQQC
AAIwBwMFAyoPbEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIc3AgMA74gwDQYJ
KoZIhvcNAQELBQADggEBAIkTGO8YAd3b3REI1/LUGCUXWlLhWUYZVNpbxmPr8aTs
5XexUV0YfGv5Ac+gGt+c9RnIHoFBU28hGsF/Y1CRobTS8c1u8fj53elBLQ3m9FsB
cw3uFg0J200bLu6vL68TciwhRuSF09wwU7IRJkxMctfWT/wFXF0bjh8a7xHUPjQj
60vgzg83HyC8XG01C0iof09+Iq7F9EMniW8AgsfU4Xb6/5fmXCWwgOJ1AiRDalWu
UffasYmGcW3O3ZQ0zhKdXrULog5OAcN+cBqMgkS0AN16oPBEvf3kijp+1+ZXubeq
DQQLTIDdE9k8xcKTy3udJ8TQQ8yB8Lkdtnffpn00ChQ=
-----END CERTIFICATE-----
Generated at Fri May 3 02:17:18 2024 by rpki-client on console-ams.rpki-client.org