Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer (raw, json)
Hash identifier: OcTsmngYPyJ0FLO6pr93a/pAshtWCg33EH2IPZcj3jo=
Subject key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF6C7B5FD64FEFDEC5D2E24E05A04A890
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 14:34:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.109.0/24
IP: 193.247.109.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:c7:b5:fd:64:fe:fd:ec:5d:2e:24:e0:5a:04:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 14:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:a5:7f:01:4d:16:2e:c8:9d:cf:fa:11:92:
6a:62:e2:08:43:38:90:f4:b9:60:86:c2:1d:ea:9b:
3b:9f:98:55:1f:22:fa:a6:91:41:d1:42:d6:07:92:
6d:81:b6:50:4e:1f:84:f8:09:cd:71:1c:f1:13:5b:
ff:82:3e:7d:36:14:9c:08:ed:52:87:4c:03:8e:99:
21:48:ba:86:19:fe:94:f5:2a:cd:4f:46:53:cb:18:
3c:53:76:d0:a1:4f:d7:60:11:82:7d:89:e6:44:86:
4d:c7:02:0e:54:02:18:68:ca:f8:14:81:a4:a7:60:
9a:e4:a5:43:44:ac:86:12:8b:87:97:0b:3e:5a:55:
65:4b:01:aa:b1:57:f9:85:b7:09:97:77:75:c1:8d:
6a:da:86:50:54:a6:0f:49:b3:72:ad:32:1f:7f:aa:
31:09:50:0b:7a:97:a3:9a:2e:a0:3e:21:56:23:aa:
2f:f1:9f:9e:31:14:78:f4:39:ac:2e:cb:e0:51:ae:
07:38:a7:38:da:ef:c9:e0:3a:9a:47:6d:ea:4d:bf:
5f:1a:ca:43:f8:b1:f3:d7:8e:81:58:39:5b:ad:f3:
34:d5:02:68:c5:67:e4:5a:ef:79:91:d0:1f:6c:c9:
72:7f:4d:08:39:b2:ea:1a:58:b0:d5:3c:be:33:01:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.109.0/24
193.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:36:12:bd:d0:ae:ba:d4:73:f3:49:eb:40:0d:96:ff:9a:66:
83:83:70:2f:5d:74:80:5d:a2:1e:08:14:64:f9:ac:ed:67:e6:
67:f0:ff:ca:c5:44:bc:04:1a:29:6d:2e:ed:95:a8:00:3d:af:
f7:74:42:23:40:07:fe:e0:12:e9:88:0a:7f:dd:58:e4:40:1b:
e4:68:f8:50:1f:7f:d6:56:e1:24:dc:82:cd:63:9d:1b:37:9b:
8d:bf:5b:c7:20:10:01:cd:23:06:85:81:a2:2c:0a:45:3a:19:
3a:0f:b1:c9:d1:7d:a7:b9:cd:1e:3b:40:c8:4d:51:3b:47:49:
68:86:84:1b:51:12:75:74:d4:f2:9a:86:62:c6:a5:19:c1:49:
ed:53:38:5a:ee:f5:95:d4:7c:77:53:77:76:3c:c7:6d:5b:22:
57:c2:ec:01:0d:fe:07:94:ad:2f:2d:bb:dd:ea:97:ba:7f:e5:
6e:37:4d:31:8e:ad:28:2c:2d:af:ab:bc:d5:42:55:08:e4:7e:
b1:e8:ba:8c:a3:92:a4:58:05:6b:43:5d:52:95:d9:7e:72:38:
8e:0f:c4:66:55:85:73:83:7d:16:55:a5:26:0b:23:a1:92:56:
9f:58:07:28:2e:38:33:6b:3b:74:63:7f:8a:f1:34:61:06:96:
ee:21:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:01 2024 by rpki-client on console-ams.rpki-client.org