Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
File: TIl_GjSX674nueLw1vPq4rvmiyc.cer (raw, json)
Hash identifier: o1yG2dlY45MrbvHq+5AStiCAHP/FxeH2WLOwb3YqAYk=
Subject key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEE96AF8E0F5948F91022807DDB746C17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 14:18:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.141.255.0/24
IP: 2a13:46c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:96:af:8e:0f:59:48:f9:10:22:80:7d:db:74:6c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 14:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:45:30:c2:d4:dc:d9:e2:ab:e0:d2:a9:7f:
55:50:d2:75:50:f8:05:57:87:3c:6a:cd:de:aa:6a:
81:91:bf:3f:7b:06:cf:28:ca:0f:36:c7:9f:9a:b2:
27:f9:35:6e:d8:31:76:37:81:9d:5d:a8:bf:ba:fb:
70:ff:05:c3:f9:5b:7a:51:de:37:b5:c4:a2:28:61:
dc:4c:07:c1:6d:4a:9e:3d:82:35:8e:0a:2c:9b:66:
4f:32:49:03:ef:99:3e:57:00:a9:b2:ca:95:93:9c:
14:aa:8a:44:dc:ec:90:9e:da:cf:0e:b7:7c:7f:9a:
1f:8b:07:f5:17:7f:06:09:a0:e9:eb:cc:90:c9:59:
02:fd:19:67:87:5a:aa:db:d2:3f:23:4e:d6:b3:fb:
93:9d:9b:37:5a:41:e0:7b:6a:8e:b7:75:a7:d9:bc:
d3:bd:c4:7d:29:26:ab:80:60:a4:0a:3f:fd:de:79:
11:c4:a9:a3:cf:35:30:85:bc:8c:0c:54:5f:2e:dd:
06:0d:41:c3:6e:e1:20:d7:b9:f5:8d:7c:df:39:af:
b9:29:fe:5b:44:fd:df:12:51:41:fd:52:80:40:be:
ae:e3:15:93:7f:bf:b2:92:58:94:96:9f:24:4d:2d:
41:d4:f5:3a:75:0a:c6:7b:e4:0a:3e:6f:cf:a4:f9:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.255.0/24
IPv6:
2a13:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
af:ea:e2:b6:3e:0e:46:93:a9:89:e4:c9:d9:c6:cf:a7:d3:70:
73:62:f3:b6:f6:cd:d9:c4:64:fc:9c:96:19:4b:c0:e6:02:55:
9c:98:d1:57:51:44:89:c0:59:05:c9:23:92:9e:f6:dc:4e:8a:
49:42:8d:f5:cc:7f:ba:8a:35:5c:af:8e:a3:4e:8b:b7:2e:1d:
d1:30:79:00:5f:3b:f2:59:a2:4a:cd:b9:c7:69:e4:d6:ed:ab:
9d:26:e8:99:f1:e8:8e:2e:6c:c6:e3:46:3d:56:10:8e:1b:22:
5d:25:37:1b:fc:30:a8:80:a5:f2:03:ad:f5:79:9e:ae:08:93:
a1:ff:a0:7d:a2:f1:b1:6a:5b:43:f8:04:b7:32:60:e3:a5:ad:
3c:5d:8a:ab:32:e9:b6:ce:8d:ba:9e:77:46:81:37:a4:b3:54:
7e:a7:3d:ce:69:ee:a5:e5:75:c7:0f:ba:0b:a1:d7:16:af:77:
32:a3:c8:7d:5b:99:94:ae:7b:7d:f5:10:e9:74:b1:ba:94:78:
73:15:4b:64:ea:cc:22:69:95:6f:b3:3d:d2:63:f9:c0:ee:dc:
ac:14:72:3e:0a:57:32:28:39:bf:ab:a8:4f:20:d1:48:d3:6b:
00:30:8c:b0:6c:50:ba:17:67:c5:4f:b9:c2:0d:cc:06:d9:40:
8a:06:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:58 2024 by rpki-client on console-ams.rpki-client.org