Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
File: TVP4paBndE6P43yXwcxLiH7axyA.cer (raw, json)
Hash identifier: Wdv5IofVGc551yco0NoPt5NzphitRaHjjlTI375+dmE=
Subject key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5663A0382C2CFA333CFB78A0FF72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51181
IP: 91.216.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:56:63:a0:38:2c:2c:fa:33:3c:fb:78:a0:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:3a:59:ae:b2:2c:20:96:58:2e:3b:05:46:
a6:69:09:2e:f8:bf:17:cf:29:7e:92:34:6b:74:16:
f2:6b:d3:a6:ac:fc:ca:5a:82:07:b8:05:cb:2a:e7:
4c:23:e0:a8:43:86:f7:4d:c1:5d:32:c0:9e:29:11:
28:c7:7d:e0:88:39:87:dd:b3:03:a7:6b:cc:af:1b:
a6:e2:6c:dc:c9:7b:49:1e:01:d9:7e:7b:74:9b:6f:
f1:39:1d:a3:de:38:08:9d:4e:2b:fd:4e:79:d3:ca:
72:98:2d:74:62:14:17:61:ec:bf:a1:a4:61:bf:b1:
97:89:0a:f0:3b:4e:66:f7:c1:cf:da:41:ab:58:1a:
02:00:47:84:99:e3:c9:6f:97:21:eb:e3:83:6e:4d:
58:e1:11:70:ee:97:33:35:f4:d6:48:d3:f7:15:02:
9c:d6:45:7a:e4:0c:e0:77:16:e7:11:d9:69:31:bc:
e9:80:c0:64:8e:2f:ae:da:6d:17:ed:b9:28:64:3f:
c3:00:fa:82:f9:37:ea:d8:3e:ac:99:f5:9c:70:ad:
11:f8:1d:fa:37:ca:50:30:64:2f:75:91:5b:f1:37:
f4:87:19:30:3c:df:9d:1b:0e:cb:1f:7b:f0:ee:9c:
a7:b8:91:da:1b:1f:0c:33:d7:45:a4:02:95:9b:7a:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.164.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51181
Signature Algorithm: sha256WithRSAEncryption
96:29:b3:4f:36:98:ac:46:0b:3f:2b:9e:3e:1d:58:f0:29:37:
cd:77:6d:79:25:60:11:71:4e:de:b5:1c:86:a6:21:0f:4c:47:
b5:73:15:05:dd:94:4a:1b:35:e0:7c:5b:37:77:15:ed:84:e6:
37:0e:c5:06:62:31:f3:71:db:be:3a:70:54:fe:60:02:ed:66:
f1:89:c9:d1:9b:42:03:d1:10:0f:82:94:df:6d:d8:cd:b9:cc:
29:74:41:6a:b7:0b:5a:4d:90:c6:f3:65:66:1b:e8:a8:10:3b:
cd:be:ee:9e:b0:76:76:79:1f:4d:dd:11:bd:f9:d1:b9:e8:7f:
fa:ce:f3:15:4d:ed:20:01:5e:ec:44:a4:4e:6c:c9:d2:97:31:
3b:64:68:c9:01:0f:6f:50:01:aa:d7:3c:3f:2c:ef:dd:ad:85:
54:68:ee:e1:82:d8:8f:ff:16:7f:36:3a:8c:0b:cb:6f:00:9c:
99:e9:f2:ed:53:9b:64:cc:31:c2:da:9e:74:25:61:26:de:f2:
d4:18:96:55:9e:e2:23:fc:5f:21:90:ea:ba:2b:3b:8f:8b:8c:
9a:7b:32:83:96:47:bc:23:91:77:41:1e:ba:f6:6a:bd:0b:87:
d1:7e:4b:0b:11:74:73:b4:90:6b:37:ac:41:2a:7e:4c:4d:ff:
e5:0f:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:15 2024 by rpki-client on console-ams.rpki-client.org