Certificate
$ rpki-client -vvf rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
File: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (raw, json)
Hash identifier: fO9mz2BC7ZQOTkhQDH+R9WjNViy5XNP9gfP1bk7VzzU=
Subject key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 010A
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Manifest: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
caRepository: rsync://rpki.ripe.net/repository/aca/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 14:13:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 0 -- 4294967295
IP: 0.0.0.0/0
IP: ::/0
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Feb 22 14:13:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:05:27:f6:b3:0b:9b:77:14:ed:09:f4:8d:
ce:0a:3d:d2:d4:83:9b:b0:05:08:86:32:84:e5:68:
a8:58:9e:6a:a9:47:c1:2f:22:48:eb:83:2a:40:e7:
38:5c:5a:6a:9a:cd:e8:61:cb:e8:a8:33:be:3f:5d:
90:29:cf:e9:4f:c9:6f:00:5c:93:d3:5e:a7:b7:0b:
3b:f1:41:17:ea:9d:51:e0:da:4f:a5:d2:97:ee:05:
49:42:42:3f:9f:db:fd:1e:8b:6f:16:a9:8b:dd:03:
e2:df:75:c9:e6:99:7b:ad:9c:32:6c:bc:da:50:8c:
a7:c4:d4:2e:c1:ff:b9:0e:0c:f8:cc:cd:3e:05:d7:
67:b0:77:b8:6b:d5:1e:52:22:64:95:19:42:b9:45:
6e:09:52:9e:b7:b1:28:e0:5f:f9:72:90:aa:be:68:
31:68:1e:f5:2e:08:5c:e0:0b:fa:af:3d:a3:eb:3a:
8b:1d:7f:65:65:19:67:a8:8f:8f:ae:0c:a8:f8:46:
05:ea:bb:b5:f4:73:62:d5:ce:e9:84:89:98:28:0c:
a9:12:84:d7:42:41:08:cb:9f:dd:68:cc:df:6e:af:
5b:20:38:96:51:e8:f0:23:42:05:88:dd:d9:de:cd:
ae:0c:76:89:2a:8f:4c:34:a4:44:4b:aa:7c:27:1d:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/aca/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
0.0.0.0/0
IPv6:
::/0
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
0-4294967295
Signature Algorithm: sha256WithRSAEncryption
cd:c3:7b:01:b6:ad:5d:bf:a8:f6:fa:d9:48:0d:9b:1d:94:bf:
d0:c8:77:f8:2b:24:f6:06:64:a1:68:d9:60:ca:3e:41:83:85:
ca:33:2e:e5:81:f9:bc:89:85:99:72:a7:24:76:6d:4e:ba:4f:
a7:e9:64:12:8e:7d:12:9f:34:4f:cd:38:6a:db:85:7f:1c:c1:
2b:e0:7a:a3:b9:1a:bf:0a:ae:2e:fe:bd:60:ef:8c:47:38:cc:
f5:24:c2:39:d0:3a:af:e5:5e:34:bc:02:5f:03:42:3a:09:33:
b9:e4:a2:89:93:b5:66:f9:18:b3:4c:ff:38:27:03:c3:b8:76:
1b:08:6d:a1:57:3b:d4:05:1a:02:de:ab:36:86:9f:bd:68:fb:
09:ad:c3:c4:a2:32:6e:58:aa:a1:aa:5a:11:ec:a2:86:85:1b:
25:ee:58:5a:b5:34:49:1d:c1:01:e6:41:8f:c8:df:62:67:6c:
9a:39:2f:fd:f3:f3:aa:71:90:04:41:5a:07:60:b6:ad:ef:2a:
ba:a4:37:66:f2:0e:74:85:3c:2d:25:d4:85:26:bf:6b:bf:5e:
f2:f9:e9:f5:5f:86:7e:c8:e8:be:17:1f:c8:f2:6e:40:80:5a:
62:f9:82:78:eb:67:60:12:51:90:19:f5:e3:96:bb:4b:9e:82:
04:c6:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:03:29 2024 by rpki-client on console-fra.rpki-client.org