Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.cer (raw, json)
Hash identifier: txFCEiTHtJR5xsYWKJ9R5f1O2wCpgHfctGJIgUN9mNg=
Subject key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42560424D0C6C9097F18F6D91F89214
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.250.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:60:42:4d:0c:6c:90:97:f1:8f:6d:91:f8:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:d9:80:44:f8:70:53:8d:ef:c3:f8:87:79:
62:d5:d5:69:93:2b:c9:03:6f:1b:3d:58:85:26:11:
36:28:56:5d:f9:fc:a2:28:14:9e:f6:d1:d8:59:17:
5a:d3:c8:85:eb:c5:97:44:ac:c9:96:12:41:d9:ef:
8e:4f:7a:06:1d:41:d6:58:c0:0c:06:40:9d:82:21:
ac:f9:0b:60:02:41:09:be:09:63:21:3f:fd:b3:68:
94:a5:7a:6c:ad:30:48:cc:f7:9e:34:63:f7:80:79:
a8:fb:53:e7:32:15:3c:11:3e:72:c2:61:75:2a:2d:
2a:a2:2f:27:42:24:b2:8e:bf:a9:c3:d0:77:21:fb:
59:b7:11:7b:d4:ae:e9:67:f5:9f:d6:a6:44:6a:78:
23:64:09:81:4e:9c:5c:72:41:6f:13:b0:28:c9:23:
94:2d:7e:fe:a0:73:4f:75:50:40:c5:2d:ef:87:1f:
21:d1:0a:c2:8b:1f:8b:09:b7:76:1a:b7:59:ca:5d:
9d:d9:cc:5f:ff:11:70:10:84:76:88:f5:83:c6:21:
8d:9f:d6:44:f2:15:84:08:fc:ce:2b:b6:d3:aa:7c:
6b:6b:43:7c:50:b5:84:50:04:53:29:c1:41:ed:dc:
9b:45:bc:49:89:d5:65:6c:24:c7:75:7c:f7:4d:7e:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:62:38:df:60:c7:1a:ff:00:32:30:c4:7c:3f:77:ec:90:e7:
9c:3a:3e:79:2c:f5:61:29:1d:02:71:79:1e:67:fd:02:7e:85:
d1:db:fd:31:36:6f:0d:f7:e0:ed:b6:72:2e:37:0b:ed:11:3c:
9d:b7:97:de:f4:8a:30:53:1c:f4:a5:18:3b:c3:1e:84:f0:89:
9b:80:af:e3:38:e4:e2:81:88:af:5b:20:be:bf:41:91:c1:ac:
42:c6:dc:18:48:ba:9f:4d:41:0b:af:74:ba:20:67:81:7e:37:
6a:34:d7:0b:ee:04:03:36:f0:da:0c:88:94:a3:f0:40:fb:2b:
1b:e3:64:65:3f:87:b7:36:54:27:38:02:0c:eb:0f:1f:17:ec:
24:1c:14:4c:e1:fa:cf:18:ad:92:2e:89:0b:1a:b6:1a:28:cb:
b1:ce:da:74:77:ec:de:ed:65:3f:0c:5b:e3:d4:6c:22:08:27:
44:df:d0:b8:53:9d:9b:21:0f:7a:24:50:33:de:55:1f:2f:12:
50:0f:64:c5:a0:8a:1d:f6:ff:18:c2:bf:62:5a:a2:1c:3c:1b:
b1:07:a4:85:ed:e4:c4:11:53:ae:0b:ff:ab:2f:82:cf:4b:00:
08:ec:93:1e:aa:70:46:c7:8f:31:11:3c:5b:1d:f7:f2:f0:aa:
0c:88:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:14 2024 by rpki-client on console-ams.rpki-client.org