Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.cer (raw, json)
Hash identifier: XjpfgEvnmU0yyTLLO2vZN+t8MqZe1otE52tE8TBTEqk=
Subject key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B707AF8540D4C5D7378CC5769594FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8511
IP: 195.38.160.0/19
IP: 2a11:a380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:07:af:85:40:d4:c5:d7:37:8c:c5:76:95:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:93:bd:bc:7e:2c:cc:22:11:31:d7:1b:0a:
d0:6f:50:19:50:84:ea:17:e8:1b:8f:ba:d1:53:bf:
aa:6c:13:fe:40:82:e6:b8:a7:10:a5:c9:1d:c1:c0:
7a:91:e2:cf:b4:e6:b5:f1:7b:d1:6b:44:10:c2:62:
fe:a5:8f:27:da:e0:0b:c6:28:c6:f8:e9:90:97:18:
3d:a7:07:93:9f:0c:f3:20:05:80:35:36:99:34:a3:
5a:3e:ff:46:69:5f:7b:23:73:fe:4c:06:bd:d8:fe:
53:d2:ba:55:fe:4d:ff:0b:92:a9:cb:fd:7f:8f:7a:
6a:e9:d5:ba:fc:47:67:3f:fb:a1:af:e6:05:e4:dd:
33:b2:64:9f:f5:c4:dc:8a:be:c0:6e:a8:c4:89:39:
a8:97:b8:a8:e9:68:0c:7d:64:67:e3:72:0a:21:17:
0c:73:74:6d:dc:47:b0:79:6c:27:e4:b7:5c:96:06:
15:d0:3b:27:66:38:71:34:15:02:64:a4:7d:f4:06:
0b:19:61:7f:87:49:f6:68:65:bb:28:d1:08:3b:b5:
18:12:af:0e:3a:b7:c6:17:54:a9:6b:03:cd:01:5d:
f2:b9:ef:88:97:35:ae:38:b4:ed:f6:a0:64:ab:84:
63:da:65:42:26:2f:6f:ce:74:a1:7d:57:ec:8d:af:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.160.0/19
IPv6:
2a11:a380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8511
Signature Algorithm: sha256WithRSAEncryption
0e:60:64:26:73:a2:16:63:9c:54:e3:2a:b0:78:a0:f8:62:43:
d3:5c:27:05:e4:2d:90:85:99:b9:53:2c:e8:02:ee:c1:37:3f:
cf:0a:60:9c:c9:5a:2b:75:f0:d0:3f:d4:73:a0:97:da:8a:0d:
2e:70:bb:dc:28:50:ee:c8:23:87:7e:52:fd:dc:67:44:85:9c:
f5:6e:57:3e:95:5c:f2:28:6c:73:c7:d6:0d:5b:37:6b:eb:b0:
30:ef:45:11:3f:ab:ae:2b:31:8f:fb:a7:05:62:00:14:a0:e4:
b2:39:45:09:74:c6:73:ae:e8:2d:a4:a9:c4:13:b2:7b:6d:5c:
71:86:10:0c:45:bb:24:a5:37:da:e4:bd:64:83:cd:11:36:43:
e5:68:ca:00:5b:2b:a9:a8:4c:df:57:c4:13:d6:41:ae:43:b7:
6c:16:aa:6c:38:15:e5:6f:b2:80:bf:5b:33:1d:4b:e9:45:90:
5e:cc:f2:6d:1b:6c:f6:eb:f3:cb:41:30:8f:da:b4:62:87:34:
b0:9b:07:45:91:68:61:5c:b9:3c:4c:55:26:5b:c0:94:1c:5d:
4b:e2:25:7e:0f:0f:e7:0a:d2:71:2a:79:e7:d8:11:cf:5c:a6:
74:81:84:cc:11:c5:ca:e2:41:46:e0:ba:81:58:49:f9:99:72:
55:5d:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:44 2024 by rpki-client on console-ams.rpki-client.org