Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer (raw, json)
Hash identifier: IOwEs4Hy7xz9JTGfNSugzAk4p7wYxbinNFOVBv6HT2E=
Subject key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7950DFAD217F3AF209349F01C056A67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.255.149.0/24
IP: 2a13:7a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0d:fa:d2:17:f3:af:20:93:49:f0:1c:05:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:a2:ff:f8:34:1b:4a:41:db:96:00:f7:38:
f1:29:d2:c3:34:55:a5:8b:4c:1e:f8:60:1f:cd:b3:
f7:19:3d:bf:e3:8f:9f:f8:0f:c5:99:55:ab:8f:95:
46:a1:f6:94:9b:5f:90:a7:a9:0e:4f:a9:9e:59:a4:
ac:4c:dc:7b:6a:05:5a:c3:e0:17:92:0a:ad:2b:c4:
c9:23:9e:da:7a:48:07:42:eb:20:92:54:cb:de:63:
4f:a8:66:59:f0:d5:9f:16:5c:9b:95:2e:eb:54:29:
7e:78:54:6b:9b:01:e0:89:6e:da:5d:2a:e3:ec:19:
73:c6:4d:43:ab:6b:e4:0f:cd:30:09:21:e1:34:b4:
71:51:d3:cb:84:a1:73:93:82:c0:53:82:ae:1a:b6:
4c:89:7b:c6:1c:41:77:19:39:eb:b8:5b:3c:9e:43:
b0:6a:94:5b:5a:fe:f6:77:c1:19:04:aa:98:d4:67:
39:12:a8:30:f3:56:2c:d3:c3:97:d2:0b:94:99:48:
b1:d4:dd:61:c4:17:3e:8e:b1:da:92:a1:eb:e1:7c:
33:e0:45:7f:4c:e2:66:b3:23:d3:fb:0f:b6:16:20:
22:41:d8:97:98:68:f9:7a:15:04:e5:e7:75:53:5b:
52:ea:e0:ec:c5:5b:ea:18:09:65:38:06:92:b7:97:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.149.0/24
IPv6:
2a13:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
1e:e8:1f:11:02:d2:37:83:23:7c:83:9e:97:72:c9:b3:dd:0d:
95:09:c5:af:16:23:8f:c6:e9:f8:f0:91:0b:d3:03:63:16:ef:
eb:64:97:a3:5a:c1:c4:7d:29:c0:91:5d:c3:8b:60:0d:c9:8c:
a4:47:6e:4f:bc:cd:54:04:c5:90:c9:9a:cf:ef:33:4f:eb:ea:
26:ea:ae:eb:58:08:82:63:ab:f4:3c:45:3f:0f:9e:42:bf:27:
61:77:5a:8a:d2:7d:62:28:32:53:54:58:90:4a:19:72:fc:e3:
64:25:9d:0b:2e:71:f4:73:65:f7:d6:9f:ec:b5:4f:71:38:6e:
98:65:81:26:b4:94:b7:52:02:94:cf:c6:8f:dc:3b:f9:9b:bf:
32:a4:37:7d:ce:6e:9e:ed:fa:13:6c:7f:0f:ed:5e:53:8b:d0:
30:a7:17:35:4f:0d:6a:52:f8:dc:cf:97:c8:24:66:37:39:8f:
f9:f9:ae:74:50:13:e1:d9:4f:00:8a:56:34:72:35:cc:42:83:
cf:30:ad:9f:d4:15:95:c7:37:61:60:1e:14:cb:c0:d9:41:7a:
d2:db:27:cd:e3:0c:36:3b:23:83:35:7b:31:67:85:9f:6e:9a:
34:14:44:a2:f9:3c:52:a0:74:78:81:05:82:a3:7c:34:34:31:
02:39:67:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:29 2024 by rpki-client on console-ams.rpki-client.org