Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer (raw, json)
Hash identifier: ogdsx5+e2gmb6QQM5WI62NU70B4zj6BBdfyFTHr4u3Y=
Subject key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222032EC0181A94FFC45459F0721C616
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50460
IP: 195.191.74.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:ec:01:81:a9:4f:fc:45:45:9f:07:21:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b641b288b4d413e955fea4460b32bf2cc182af03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:1b:88:40:aa:ad:b0:3a:91:34:fa:7a:af:
76:bf:3a:a9:68:c5:94:f7:58:d9:fe:d8:0b:8f:b5:
e3:7e:51:c8:48:a6:01:6e:eb:31:3c:df:3c:ec:51:
59:e4:b7:40:d0:fa:79:a6:f4:cc:79:ca:cb:82:72:
02:52:cf:e9:d3:35:d0:91:88:c9:c9:b4:20:91:37:
09:2b:2c:65:7a:3b:1d:6d:cb:15:84:db:42:86:92:
09:f0:ec:08:a6:61:da:f4:66:ac:c0:96:8f:58:29:
f5:ed:21:cf:76:a7:4f:d9:5c:d3:40:d0:f6:34:79:
87:92:c2:21:a5:b0:a8:86:98:04:7d:99:3f:e4:82:
7d:1d:12:51:6c:a5:18:1b:58:c5:25:75:a5:dd:8f:
d0:71:2e:f7:41:df:0b:13:94:9a:ac:1c:b5:7f:cb:
c6:34:08:c3:a2:a1:7f:3f:af:e6:3b:cf:92:87:f0:
d0:7a:41:2a:b5:38:55:44:14:4b:ff:ef:1a:83:54:
95:9f:68:fc:4b:40:6d:16:62:09:30:20:2a:7f:b7:
41:08:5d:e7:0b:15:dd:b6:e7:35:a1:f2:97:d3:64:
b4:88:22:d6:54:bc:ba:0d:c5:49:9a:3e:5d:37:ac:
9e:31:ed:65:b6:28:39:ea:76:b3:4f:3c:cb:8b:4d:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.74.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50460
Signature Algorithm: sha256WithRSAEncryption
23:6a:a9:5a:59:4d:b4:02:f1:06:13:46:bf:d9:36:0c:16:e6:
7c:2f:fa:ab:11:f4:6f:d3:a2:9e:6c:78:5c:0e:ec:61:25:8b:
fb:55:62:d8:74:5e:3f:0f:6e:74:db:5f:57:0a:32:42:ee:16:
3f:d7:43:18:8a:ea:e4:7b:a5:29:ac:19:e6:cd:ff:ec:74:5d:
a1:af:15:31:9d:f5:99:6a:e2:a4:58:a6:45:00:80:b1:f8:41:
de:52:3f:97:d1:68:b6:09:38:4f:5b:29:3a:9d:12:00:1f:a1:
73:0f:4e:5e:91:1d:8f:ae:b3:95:e3:a8:0b:7a:b2:57:4d:d1:
61:33:b1:a0:cd:33:d8:ad:d0:b4:f6:e7:e5:b1:86:b2:b6:7d:
dc:c3:03:08:f2:f1:78:1a:3d:77:91:00:3c:1d:8d:2c:eb:95:
b8:75:d8:e8:04:62:f8:8c:f3:62:7c:c7:dd:32:3f:40:50:53:
c6:c6:ed:2e:2f:1e:4d:a2:48:26:5a:d2:81:91:39:1e:c9:e6:
f2:1a:8d:68:e0:e9:63:36:0b:4d:6b:4f:12:f0:a1:5a:85:f2:
12:9d:9e:92:b3:e5:88:6b:0e:ec:9d:b4:00:17:91:64:d2:cc:
db:b2:20:57:ff:d4:db:af:79:a5:95:1f:9d:6b:3b:c6:50:92:
0e:51:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:23 2025 by rpki-client