Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
File: TkJsh9-8xVLceQ_sPtHN56j4huk.cer (raw, json)
Hash identifier: R0kA4skVPwme4PMDGedIuWubZfRuTs5FZzIySaATxBc=
Subject key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBFDA651F281B4F937318DF2A8E697
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48197
IP: 94.127.152.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fd:a6:51:f2:81:b4:f9:37:31:8d:f2:a8:e6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:fe:85:bd:c7:27:9c:f8:52:a7:60:7b:67:
60:2c:5e:6d:dc:e7:4e:9c:ca:16:b9:a3:54:29:34:
47:8a:59:68:ab:8f:0e:2a:71:9c:4d:ca:cd:e1:c3:
4a:e9:68:1b:5d:ee:b4:76:fa:66:81:8b:48:7e:49:
3b:cd:2e:49:35:f7:d4:d4:39:c4:4a:56:ac:d9:ed:
a6:eb:2f:03:43:37:54:4d:dc:9b:25:f7:3f:2c:6e:
ee:8d:33:d1:3b:48:ef:99:58:92:a4:01:e1:9a:4d:
0d:fc:d4:23:33:56:01:bf:89:ef:e1:2a:ab:77:55:
7b:24:f6:77:ff:8f:bc:9b:78:c9:c9:70:7b:4c:8a:
5d:80:0e:46:55:0c:ff:4e:23:17:64:0d:49:55:80:
8b:39:4d:26:b5:c0:fd:4e:31:b6:63:18:c9:b3:ac:
df:e2:d8:bc:3e:b6:5c:cb:bf:bc:03:cf:1f:d6:1c:
2f:cb:9b:88:e0:6e:e6:b8:1e:2f:35:1a:b1:2b:7d:
8e:f4:0a:96:f2:a0:da:42:f5:3c:a7:40:78:e4:5a:
71:6f:ea:5a:28:19:52:39:5d:14:7c:e0:62:57:72:
8d:7b:b4:0b:7a:2e:a9:69:f9:8c:bc:f2:23:49:19:
0c:1a:2c:e7:bc:68:0c:7d:e7:18:c9:40:43:b6:59:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.152.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48197
Signature Algorithm: sha256WithRSAEncryption
0e:f7:fd:ec:ff:22:87:80:f3:6b:07:68:38:6e:a9:2e:06:6e:
ef:81:b3:2c:d6:8c:bc:91:cc:f0:31:31:ea:3c:56:e0:36:7b:
1f:a1:9f:85:f3:45:b2:a2:b0:18:68:b4:18:01:4a:b1:d8:38:
43:f7:73:68:34:31:49:57:3e:3a:60:c7:0b:13:f2:75:9e:f3:
d9:c3:bc:be:cb:4a:d1:89:2a:3c:aa:f1:f8:26:1f:02:e4:c6:
8b:34:8c:79:6d:9d:86:79:0d:9e:7c:98:36:97:bd:d0:82:bb:
44:cf:0c:67:d0:e9:cc:29:c5:2c:99:28:aa:97:35:bb:bf:e4:
ab:72:8c:92:c0:50:a6:03:78:8d:46:dd:47:23:8e:3f:9f:20:
2b:6b:b7:8b:b9:b3:a5:b3:be:d3:70:18:af:4d:68:9a:c2:f8:
fb:f7:f9:0f:5e:26:48:bf:f2:66:bb:36:da:42:65:eb:65:af:
b2:50:74:0e:8b:6b:4b:b9:85:83:f7:03:c5:49:7d:00:ae:ef:
88:93:2a:3c:62:fa:c6:32:d0:51:89:e8:8f:fc:b6:a8:48:68:
8c:e4:e8:b7:14:14:4c:88:3d:14:6d:4e:cb:1b:1f:d3:c6:c1:
92:5c:f1:df:2c:5b:b6:7d:67:cf:62:67:bf:28:87:04:26:ff:
7d:17:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:23 2024 by rpki-client on console-ams.rpki-client.org