Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.cer (raw, json)
Hash identifier: 2tK5DcMAXp+W62+uRwtoZHv1kLGkIDoiS9PUdPJDEFA=
Subject key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424E34B1A9BED4A6BE93ECBCE3182B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48822
IP: 95.171.0.0/19
IP: 185.216.60.0/22
IP: 2a02:2548::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e3:4b:1a:9b:ed:4a:6b:e9:3e:cb:ce:31:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:44:80:3d:0f:09:1c:7a:da:90:f1:53:be:
03:9d:db:ea:55:20:bf:c6:90:1e:f6:dc:97:b8:8b:
38:a5:bf:35:3b:76:96:8e:bc:69:63:62:89:46:cb:
b9:69:f6:de:41:62:45:f6:a5:26:96:32:cf:59:1b:
b2:70:aa:54:06:0b:c7:4a:da:12:92:b7:2d:81:67:
8f:96:91:3f:f1:10:c0:18:b9:95:62:4a:31:fb:c8:
3b:c1:fc:17:9d:c6:e4:1e:16:61:26:8d:75:83:19:
ad:c7:4e:67:84:eb:2f:70:84:38:81:80:1d:13:12:
31:b7:be:b5:8e:45:07:3a:05:8f:8a:24:a7:56:6a:
85:62:d0:87:25:06:f8:8f:30:29:19:35:71:05:c6:
1e:87:74:68:b3:3e:80:ed:3e:f8:ba:8b:35:e4:92:
62:9a:cd:9e:40:53:48:07:cb:4d:2c:d6:92:de:df:
97:30:fa:fa:0a:ea:c2:b4:a3:4a:88:9b:9a:e9:88:
39:4d:67:c6:00:10:4e:32:f4:77:af:14:7e:db:60:
e5:92:57:d2:b9:cf:ba:84:d3:0f:45:d3:c3:3a:06:
37:de:5b:96:de:15:7b:6c:a4:ef:e5:67:b2:2c:bd:
0c:75:2e:75:44:38:3e:c7:91:8b:33:38:92:e0:18:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.171.0.0/19
185.216.60.0/22
IPv6:
2a02:2548::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48822
Signature Algorithm: sha256WithRSAEncryption
1e:80:a3:b3:7c:cf:bb:ae:0d:4f:80:7b:dd:41:1c:98:a1:28:
3c:b9:bb:28:32:2f:e4:39:23:c7:66:6a:01:6c:cd:99:b8:2e:
ef:f5:a4:88:58:1d:04:48:ae:91:40:54:83:ab:39:a5:e7:08:
b4:34:25:e3:4f:d0:83:af:6a:47:c8:c7:bd:05:0b:1a:c2:e3:
e8:9d:55:cd:ec:d4:d8:72:bf:24:6f:d2:36:b7:46:97:d7:68:
aa:f1:8b:a0:a6:ac:91:86:a7:c2:d2:5e:16:b4:e2:fa:80:b5:
68:ec:e1:50:b0:89:7c:7f:92:d4:38:86:6f:90:43:d2:03:7d:
56:6d:30:0f:3c:62:eb:58:22:31:f0:62:e0:a7:5d:49:36:98:
d2:62:62:47:17:52:a3:34:c6:a5:a2:a5:4b:75:eb:7a:4a:a3:
cb:05:42:01:9b:82:64:07:e2:ad:0b:d0:3f:21:df:ed:cf:ce:
4a:11:81:f5:e8:1f:aa:aa:07:9f:c1:40:f3:e8:e2:9c:24:23:
e5:ff:e1:1c:e1:ec:0d:88:c4:c6:39:74:e5:e6:1f:8f:c6:91:
b8:61:fe:f3:9c:cc:a7:65:88:d2:7a:61:d8:00:e5:60:da:26:
e9:2e:d0:a4:45:d7:ba:d7:ed:15:2f:28:32:8b:34:1d:b3:55:
29:e6:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:36 2024 by rpki-client on console-fra.rpki-client.org