Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer (raw, json)
Hash identifier: AnRkjcMBoWdMMdx4Z1aDEJCM5hnB7MrRBae9VoOWeh8=
Subject key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493377525D5CF4DAD538A1C237D29E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41327
AS: 196753
IP: 31.185.96.0/21
IP: 93.94.88.0/21
IP: 185.61.168.0/22
IP: 185.157.228.0/22
IP: 2a03:b020::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:75:25:d5:cf:4d:ad:53:8a:1c:23:7d:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b732762a5e861e976de53d14786f39e3a669681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:40:04:56:aa:1e:be:d8:b8:30:e0:dc:99:
8d:9d:fa:0d:85:20:94:e2:31:c9:5d:66:46:ae:f9:
a0:c9:06:42:09:be:c3:86:9f:a4:47:f9:ce:e9:19:
96:57:ca:a3:50:c7:35:b5:9c:0f:c2:62:f1:8e:cf:
54:ab:e3:d7:f0:1e:4d:40:12:44:af:79:46:23:90:
80:69:ba:e2:9a:d0:65:e0:b4:ea:34:20:d4:66:ee:
9c:b8:61:a3:5c:93:69:e9:27:29:fc:dd:fe:2b:aa:
40:5e:40:1b:c5:ba:90:b0:03:8a:8e:79:30:3c:7d:
de:69:bb:9f:76:31:76:92:6a:58:ed:d7:18:12:62:
df:48:a5:f7:4d:75:4c:f7:bc:5e:75:05:29:1b:a0:
1c:9f:4b:4c:07:8a:2c:bd:2f:56:42:24:83:f7:5f:
c2:16:ab:5e:7e:a4:43:ad:d2:ae:44:ce:9e:16:be:
3f:69:a7:26:cb:e2:c0:07:e1:5c:25:48:69:3c:59:
3c:b9:36:ab:27:98:4e:06:86:17:93:ec:69:5f:5a:
4d:5c:30:80:68:e8:9d:22:b8:05:21:02:1f:dc:6c:
77:51:9b:34:f0:c0:ba:a5:a2:f2:e4:72:03:ba:cf:
38:01:b3:88:4a:42:6b:5b:bf:ed:4a:b2:af:53:78:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41327
196753
Signature Algorithm: sha256WithRSAEncryption
69:8c:3d:53:a1:3f:4c:00:64:40:d1:c2:89:7b:b5:9c:8c:86:
f6:e5:f4:31:67:8d:ad:ba:29:f6:19:cb:91:0f:30:29:e7:ad:
b4:ea:2c:bc:0a:1d:49:50:93:0d:40:4d:56:8e:18:31:e2:fe:
12:d4:7a:43:88:90:72:c7:5e:a0:4e:73:81:05:92:a0:5b:12:
66:d3:ef:1a:ec:e0:3a:4b:54:df:1b:c8:3d:8d:b4:f5:52:0a:
a6:12:ba:32:02:42:c3:7e:3f:9f:c6:b8:46:69:58:8e:38:fe:
01:79:76:57:3d:2b:d7:1d:fe:7d:28:ce:96:b8:63:09:36:b0:
a7:50:51:0c:e4:7b:c9:60:5c:e3:48:4b:5a:4d:49:3a:5e:63:
09:94:ae:10:18:f2:ff:ac:dc:5e:81:f1:e5:21:59:e5:56:ed:
c9:56:fd:32:06:0d:02:a3:05:57:aa:2b:ab:3f:ee:28:e5:af:
61:ec:50:2d:70:11:54:1d:5b:63:ab:ca:2c:fe:0f:98:b7:52:
89:46:48:28:8b:3a:bc:e8:b6:b2:02:c8:d0:21:d2:ac:b1:a1:
1e:18:e1:61:72:17:52:ee:2f:f6:dd:c1:2c:a2:09:24:88:08:
aa:22:2a:3e:53:b9:97:61:73:88:cf:a4:15:14:fd:a9:8c:cb:
12:d3:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:05:55 2024 by rpki-client on console-ams.rpki-client.org