Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer (raw, json)
Hash identifier: i/WxpgmbZn6cBkjGoyTXzwc+I5kbeC/u03wwSsoIdRE=
Subject key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F281368276DEA56318546BFFF0A7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50460
IP: 195.191.74.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:28:13:68:27:6d:ea:56:31:85:46:bf:ff:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b641b288b4d413e955fea4460b32bf2cc182af03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:1b:88:40:aa:ad:b0:3a:91:34:fa:7a:af:
76:bf:3a:a9:68:c5:94:f7:58:d9:fe:d8:0b:8f:b5:
e3:7e:51:c8:48:a6:01:6e:eb:31:3c:df:3c:ec:51:
59:e4:b7:40:d0:fa:79:a6:f4:cc:79:ca:cb:82:72:
02:52:cf:e9:d3:35:d0:91:88:c9:c9:b4:20:91:37:
09:2b:2c:65:7a:3b:1d:6d:cb:15:84:db:42:86:92:
09:f0:ec:08:a6:61:da:f4:66:ac:c0:96:8f:58:29:
f5:ed:21:cf:76:a7:4f:d9:5c:d3:40:d0:f6:34:79:
87:92:c2:21:a5:b0:a8:86:98:04:7d:99:3f:e4:82:
7d:1d:12:51:6c:a5:18:1b:58:c5:25:75:a5:dd:8f:
d0:71:2e:f7:41:df:0b:13:94:9a:ac:1c:b5:7f:cb:
c6:34:08:c3:a2:a1:7f:3f:af:e6:3b:cf:92:87:f0:
d0:7a:41:2a:b5:38:55:44:14:4b:ff:ef:1a:83:54:
95:9f:68:fc:4b:40:6d:16:62:09:30:20:2a:7f:b7:
41:08:5d:e7:0b:15:dd:b6:e7:35:a1:f2:97:d3:64:
b4:88:22:d6:54:bc:ba:0d:c5:49:9a:3e:5d:37:ac:
9e:31:ed:65:b6:28:39:ea:76:b3:4f:3c:cb:8b:4d:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.74.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50460
Signature Algorithm: sha256WithRSAEncryption
9c:25:c5:50:04:0b:18:4a:55:9a:13:43:34:3b:2e:ec:9b:12:
5f:3f:16:9c:ea:6c:3b:17:65:1c:fc:2a:7e:57:e0:74:1e:6f:
83:3f:16:64:3d:7b:aa:ba:57:5f:5d:94:8a:73:86:1e:d9:c1:
61:10:32:b5:f7:58:a1:41:08:d1:a6:d8:46:56:c1:4a:c8:59:
85:b1:76:76:75:af:df:f7:5c:53:76:0c:f4:d4:1f:ab:b9:1d:
90:6c:f6:c5:40:4d:d5:6e:dd:e1:fe:7c:80:ba:03:33:b6:e2:
03:a3:23:fa:29:e0:02:cb:10:ba:35:90:3a:61:ac:21:a6:22:
53:cd:d5:f1:2b:e3:00:c9:86:d7:cb:0c:b5:1c:aa:a6:87:e8:
5e:49:c0:5c:2c:59:67:3f:70:ba:a1:11:5f:48:aa:a3:39:69:
df:d5:22:09:9f:9e:72:7d:09:b2:24:b3:76:ba:fd:81:c5:13:
cd:a9:49:39:f0:20:37:94:d3:a1:c7:56:62:a4:9a:23:23:fe:
91:cb:25:fb:4d:19:7e:e5:9d:85:b2:ed:ba:32:0f:10:bc:ac:
70:47:2d:18:0f:bc:97:1a:7c:75:32:77:c6:3d:72:4a:cd:a0:
46:46:6c:37:f4:a4:6c:51:37:b9:48:35:23:40:c4:f9:d8:16:
cb:0f:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:28 2024 by rpki-client on console-ams.rpki-client.org