Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
File: PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer (raw, json)
Hash identifier: PQ/w/JYcBiG0a43zk1p2+OpASsZYcfulqrqAhAxE+5c=
Subject key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D396F863B85F12337083ED97DB1C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
caRepository: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/
Notify URL: https://rrdp.rpki.tianhai.link/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.127.229.0/24
IP: 2a13:1800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:6f:86:3b:85:f1:23:37:08:3e:d9:7d:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:94:f0:8c:1d:2d:bd:3f:76:80:bd:10:7d:
eb:95:a6:69:18:e0:ef:e3:39:4d:dd:54:43:e8:02:
28:39:5e:55:99:9b:6a:30:36:f7:92:fe:6f:bd:20:
6f:66:f8:1c:9c:85:3d:5a:cc:ff:45:fa:68:b1:2a:
18:4d:a1:b9:26:8c:03:d5:6e:33:8f:c8:0f:1d:2f:
8f:fe:88:b4:1a:2e:c0:5b:63:33:fd:ab:d1:2e:bc:
62:e3:21:f3:15:63:22:9d:f5:d2:31:41:16:e5:df:
bb:8c:18:87:46:63:a2:ba:47:1f:21:bd:0c:16:74:
c8:e6:12:32:98:13:6a:d1:1f:4f:85:d1:38:c3:17:
70:34:cf:43:62:c2:ae:d6:f7:b7:22:47:06:79:94:
c3:4d:fc:c0:a3:82:97:a9:3c:d9:eb:36:cb:61:f4:
67:62:1f:fe:05:14:d2:0e:f4:75:a4:75:26:83:ab:
21:73:6b:75:bb:5f:13:38:bd:90:25:ac:cf:28:07:
8a:be:72:5b:f5:1f:c6:d1:c2:74:66:ff:db:82:ce:
d7:f5:8b:17:21:e0:56:ee:54:f3:54:6a:76:1b:b5:
22:7a:78:7b:b8:04:6a:ac:59:ab:58:4f:11:d9:d4:
f3:2a:23:db:7d:92:72:20:67:c3:eb:6f:24:2d:28:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/
RPKI Manifest - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
RPKI Notify - URI:https://rrdp.rpki.tianhai.link/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.229.0/24
IPv6:
2a13:1800::/29
Signature Algorithm: sha256WithRSAEncryption
6b:5a:c2:c9:31:a0:0a:68:0e:b6:ab:18:97:b7:de:f5:a3:67:
a5:ab:0a:bb:7b:11:69:3a:ff:3b:4a:e8:4c:1c:dd:80:b3:69:
26:86:4a:78:27:c2:fd:2e:3c:24:45:cc:45:80:46:18:ae:ce:
45:7d:30:0e:c6:f5:cf:37:6c:e1:20:b2:aa:79:fa:eb:fc:7c:
17:d0:3a:4d:db:33:87:73:10:50:e9:ef:3c:0d:d8:4c:c3:15:
ef:27:47:e4:d4:e0:57:b5:68:63:da:92:d3:68:7c:ff:91:99:
46:9b:d5:9a:c4:ab:2c:2e:8e:e6:65:c9:87:1f:11:44:27:e2:
bd:8e:b5:10:31:72:d1:c5:cc:fb:96:17:26:ed:42:6d:70:32:
ad:76:21:c2:68:85:f2:7e:a1:de:a5:cb:5a:7e:7c:db:80:76:
d4:18:2b:9d:03:40:1c:64:4d:b7:48:a8:a6:f1:e8:6a:d3:9a:
0d:cf:44:b7:a0:1c:76:9c:a1:0a:82:53:a1:7f:ec:b8:db:4c:
6f:39:ea:e3:3d:be:d1:db:b2:79:41:9b:22:a4:fb:c5:bc:61:
26:15:6b:f3:37:c0:f1:ea:af:65:ff:1b:a0:9a:76:4b:b6:fc:
78:38:da:da:2c:a6:53:44:03:7d:1f:cc:d5:90:c9:e2:53:d6:
e2:eb:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:58:52 2024 by rpki-client on console-ams.rpki-client.org