Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer (raw, json)
Hash identifier: UqPPXXVz8Kph0TNbpNT1As8NN0JPPUN+ggmibSzd/J4=
Subject key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42468698B70A2592C2DB36544D5D948
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:3e0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:68:69:8b:70:a2:59:2c:2d:b3:65:44:d5:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:e5:dd:a4:5e:5b:f1:17:00:3a:78:6f:d2:
00:2c:e7:c1:dc:e4:cb:c7:a0:41:89:9f:55:5b:aa:
36:de:37:ab:17:7f:cc:56:fe:07:8d:8b:01:a9:0b:
e4:5e:3f:f4:35:2d:35:f9:91:82:90:77:1d:e3:06:
b8:14:45:2a:57:a5:94:1f:a5:b7:c0:b0:89:ba:6b:
d0:cd:19:39:4f:b9:99:26:c5:f9:f4:e3:80:02:ac:
74:da:7b:d1:51:81:04:ed:a3:50:fd:32:bc:8b:55:
a3:1e:f0:9a:82:36:7c:a3:8e:38:8a:b3:cd:fe:3e:
a8:84:6f:9a:97:18:15:3e:82:8d:ac:f1:4e:7d:c4:
03:8e:ec:b4:ff:67:9c:1b:db:89:d2:e5:48:a6:cf:
5c:81:62:61:c0:34:5d:ce:97:36:33:db:23:53:c3:
f1:f2:84:b4:02:43:d1:79:57:9e:cb:c4:c6:5c:0a:
61:cd:16:ed:d2:8b:73:87:dc:88:4a:d7:57:ba:da:
80:be:e8:af:31:aa:5b:ba:39:f9:84:49:2d:7e:2e:
25:e8:ea:64:1f:89:5d:cf:9e:2f:10:76:1f:9d:32:
0b:00:2b:b5:cc:b5:a7:ab:39:95:e1:35:7d:3e:75:
f1:c5:13:cf:8b:cf:15:15:d1:9c:9a:f3:e5:f6:29:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:78:70:c7:5f:44:8e:9f:fb:49:f7:f5:69:71:6c:46:b0:31:
42:7a:7b:58:0a:23:1f:c4:b3:d0:f9:4f:b7:42:cf:18:e0:73:
2e:d0:cf:7b:ce:95:ba:4a:61:02:59:12:03:67:bf:63:9e:18:
d0:26:4a:2a:af:94:33:1b:65:5a:d4:84:07:47:e9:05:7b:ce:
c7:d4:53:ca:e9:ef:1c:b8:c0:38:25:85:ed:f6:9d:8d:74:b3:
ce:8c:09:78:58:0f:d7:af:32:d2:66:50:28:e6:de:c0:78:22:
fc:35:47:0d:ab:21:4a:63:aa:60:dd:d5:1a:86:40:0d:19:ce:
ea:d6:d3:52:35:a4:9d:6a:92:b8:92:e1:91:3b:94:70:e9:a7:
f8:9d:0a:f9:fa:0a:45:4c:df:c2:41:f8:80:fa:00:ae:50:33:
17:41:a4:e1:fd:87:c2:74:0a:7f:0b:e9:fd:be:ca:16:ab:ae:
23:34:2b:72:45:fc:86:c2:f4:d8:0f:ec:d4:97:24:21:d7:f7:
8a:6f:ee:05:3a:e6:5d:f2:8d:3c:ba:1a:85:0d:6e:73:57:1b:
d5:95:51:b8:89:b7:6d:74:70:0c:1f:f7:81:92:ea:bb:80:bf:
2c:30:36:4a:b0:f9:7d:bd:f7:e5:f3:52:8e:03:03:74:29:f1:
9e:fb:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:25 2024 by rpki-client on console-ams.rpki-client.org