Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer
File: tfaNwgTWi-AyolQmKOszpT9ZZZs.cer (raw, json)
Hash identifier: UcEjF9x8BAmVYQvchyjxXW5kp4amUUm4ourFs814ius=
Subject key identifier: B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349059F966E89A696975E963EB9B2CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206368
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:05:9f:96:6e:89:a6:96:97:5e:96:3e:b9:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5f68dc204d68be032a2542628eb33a53f59659b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:97:a8:5c:d8:65:33:4e:43:37:e0:d1:b4:
d7:fe:67:7f:eb:2c:b7:0b:38:69:d6:16:15:08:43:
ca:53:6e:84:17:b9:2c:73:94:07:e5:7f:fd:04:64:
98:f7:cf:96:ba:cc:77:c7:83:27:13:5c:9c:51:d3:
e7:01:4a:97:3b:64:86:65:6f:8c:68:39:59:63:1d:
3a:f7:df:27:67:d5:83:e9:a1:fb:9f:0c:f2:a9:a5:
3f:e2:9c:2f:92:ef:35:6a:e2:6c:7b:20:66:69:84:
c1:2b:52:72:32:1f:98:5c:90:0b:b1:3e:29:5e:fe:
1b:c4:ba:17:e7:4e:7f:25:74:b4:25:5c:1f:a5:f8:
9b:77:6e:4b:39:16:bc:58:c2:ef:02:77:2e:24:34:
11:f2:94:63:d3:72:f9:00:df:2d:23:23:66:3f:37:
50:0a:19:1b:77:15:05:b1:56:c0:db:9e:cd:5b:af:
9b:8d:7a:c5:50:d1:f3:97:31:30:64:f6:70:c3:06:
95:14:11:5e:2e:a1:b4:4b:a7:b9:00:74:b8:76:c3:
5a:b5:f6:75:02:74:0c:01:00:be:76:8e:25:87:53:
bc:40:fe:23:a1:46:db:48:5d:d6:db:0a:d5:05:77:
70:ad:cc:21:b7:6c:01:16:c5:cc:e4:bc:24:52:f1:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206368
Signature Algorithm: sha256WithRSAEncryption
51:97:6d:5d:7b:22:02:2a:ff:0d:1a:74:74:ab:6d:d7:34:12:
72:72:9c:8f:ef:57:90:e1:b7:f8:9a:e5:0c:f7:ae:1b:63:44:
e2:46:9e:7d:02:d5:9d:04:9f:d0:88:6a:59:31:8d:72:0a:f0:
6a:dc:09:11:9d:67:2a:cc:a1:bb:3d:ab:a0:05:6a:38:41:51:
82:21:e8:bd:13:b2:8b:dd:ac:9e:49:29:e9:ad:91:5d:1d:4f:
26:c7:c0:63:02:67:42:ae:40:2a:63:3a:0f:68:51:17:bf:2c:
cb:59:49:58:93:87:3d:22:82:04:c9:03:8f:bd:45:13:e4:3f:
5e:0e:54:4a:64:9c:16:98:45:56:cc:8f:30:4f:3d:e0:7c:f8:
54:dc:13:94:a9:68:94:82:09:c3:e1:84:46:0f:f2:02:15:f0:
6f:ff:80:f9:22:83:ac:15:51:30:b2:0e:af:f2:e7:fa:f6:0c:
0a:8a:59:fe:fb:de:36:05:ca:e9:1f:b4:ee:06:c1:a2:0c:aa:
a0:e8:cb:69:94:ed:d4:f2:43:dd:70:12:3e:2c:c7:04:29:e5:
7f:a9:2e:2b:2f:8e:40:a6:da:62:50:1a:ce:b8:eb:9b:b9:4d:
c9:b5:b8:ad:08:36:cc:6e:2e:e1:7b:b6:bd:11:a0:47:20:cd:
2d:25:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:47 2024 by rpki-client on console-fra.rpki-client.org