Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
File: tbYylyVHZz3w91qryDmiQihUoio.cer (raw, json)
Hash identifier: eq363E+FF45jqmm/noHKMWk+1qXNFJbUyHFSccW8sa0=
Subject key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8013BE8D6E4EF3B839355CF47630F22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 137.193.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3b:e8:d6:e4:ef:3b:83:93:55:cf:47:63:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5b632972547673df0f75aabc839a2422854a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:d3:a8:ec:62:05:0d:f0:1e:a6:6e:11:f3:
8c:87:14:0d:e8:13:d0:b0:15:2b:26:d4:80:ca:13:
9a:77:06:1b:50:dd:88:8f:fd:d2:c0:0f:df:be:44:
8c:99:d5:c7:06:e6:65:46:c3:cd:eb:b9:18:42:78:
e1:74:de:23:2b:2e:69:62:f1:55:d3:7c:42:26:3d:
4e:ee:99:08:ab:60:2e:12:8e:50:59:98:fc:fb:3b:
e8:03:4e:a4:5e:fc:0e:4e:0d:51:cf:78:95:37:d4:
cf:f7:af:c2:c9:6f:09:1d:74:ca:b1:9b:82:b5:3a:
61:12:db:4d:e2:69:01:bc:4e:10:d9:7b:d9:d0:01:
bc:01:98:66:e5:0f:45:45:00:d8:22:98:50:6a:09:
91:a8:2c:0d:50:ef:05:d2:cc:52:1c:6c:ea:b0:14:
66:b0:fd:d1:7f:4d:bb:62:68:8e:9e:74:a1:45:89:
4b:45:6e:f0:4e:b8:4e:6d:8b:6d:19:3d:2f:66:94:
18:83:f1:3c:02:63:98:0a:da:2d:f6:2e:aa:5e:05:
64:3d:cb:b5:8f:63:63:11:d7:7e:93:de:d9:dd:66:
99:62:fc:c1:fb:11:18:78:a0:1b:8b:0f:8d:94:8e:
44:84:71:b6:2f:65:63:56:5c:9c:8f:b5:d6:41:c9:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:75:00:88:c4:d7:7a:04:a2:f6:bd:3c:8d:61:a6:a4:e9:f9:
ad:6a:0a:4b:8c:28:0f:1e:c1:3e:5f:c4:a1:f5:fd:34:1e:9f:
5f:a4:61:35:29:66:e8:eb:62:22:68:2e:df:71:d4:be:6d:a8:
51:ea:d1:a4:aa:cd:e4:57:c2:a5:d6:3a:05:be:de:7f:22:66:
0e:7d:d2:5e:50:d1:e8:01:2b:c7:28:06:40:40:2b:4e:cd:e9:
dd:85:60:69:8d:fa:66:d9:5b:5e:21:2c:c9:69:2d:83:99:42:
ba:25:fc:c5:32:18:1b:7a:86:78:2e:04:02:ae:48:b9:d3:4c:
9e:00:34:8c:f0:68:7e:c1:74:62:ec:9c:5d:6e:43:dc:8d:7b:
12:b1:c5:0d:bd:a2:63:b8:2e:c3:fd:aa:07:c9:a4:f4:ea:59:
b1:2e:04:8d:82:bc:eb:8b:bf:0e:e9:2d:c1:f5:3c:eb:4c:35:
3e:b8:80:8a:3b:1a:e3:05:b4:5a:de:80:d9:5a:30:66:9a:e7:
de:a6:69:85:90:d4:4c:24:9e:6c:7b:b8:49:d5:35:bd:5e:0a:
5d:93:ee:ed:79:0d:a9:3a:20:a8:63:00:c9:2d:d1:2e:b2:6f:
c6:aa:b9:a8:0b:90:dd:f8:d0:53:ce:c1:da:18:6f:eb:31:b9:
5a:c4:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:24 2024 by rpki-client on console-ams.rpki-client.org