Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.cer (raw, json)
Hash identifier: 9KNYEBD8OJ/YaclFcaQZmAl0zlciRoCcd433lC4LYq4=
Subject key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5F6606D9DC5801E3E8610FF54F42D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.250.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f6:60:6d:9d:c5:80:1e:3e:86:10:ff:54:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:d9:80:44:f8:70:53:8d:ef:c3:f8:87:79:
62:d5:d5:69:93:2b:c9:03:6f:1b:3d:58:85:26:11:
36:28:56:5d:f9:fc:a2:28:14:9e:f6:d1:d8:59:17:
5a:d3:c8:85:eb:c5:97:44:ac:c9:96:12:41:d9:ef:
8e:4f:7a:06:1d:41:d6:58:c0:0c:06:40:9d:82:21:
ac:f9:0b:60:02:41:09:be:09:63:21:3f:fd:b3:68:
94:a5:7a:6c:ad:30:48:cc:f7:9e:34:63:f7:80:79:
a8:fb:53:e7:32:15:3c:11:3e:72:c2:61:75:2a:2d:
2a:a2:2f:27:42:24:b2:8e:bf:a9:c3:d0:77:21:fb:
59:b7:11:7b:d4:ae:e9:67:f5:9f:d6:a6:44:6a:78:
23:64:09:81:4e:9c:5c:72:41:6f:13:b0:28:c9:23:
94:2d:7e:fe:a0:73:4f:75:50:40:c5:2d:ef:87:1f:
21:d1:0a:c2:8b:1f:8b:09:b7:76:1a:b7:59:ca:5d:
9d:d9:cc:5f:ff:11:70:10:84:76:88:f5:83:c6:21:
8d:9f:d6:44:f2:15:84:08:fc:ce:2b:b6:d3:aa:7c:
6b:6b:43:7c:50:b5:84:50:04:53:29:c1:41:ed:dc:
9b:45:bc:49:89:d5:65:6c:24:c7:75:7c:f7:4d:7e:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8f:75:bb:4f:69:3b:b7:1d:a8:ef:17:48:ae:46:5c:2a:2a:
9c:04:55:0d:1c:10:5a:74:2b:d8:3e:98:f7:41:78:60:ac:47:
bc:1c:a7:0e:d0:ba:8a:ff:86:ec:60:cc:dc:0c:90:e3:78:bf:
90:8c:db:23:5b:af:f0:bd:bf:50:e8:d2:21:a1:76:dd:08:bc:
2f:f7:ab:10:82:23:e6:e1:ed:a3:68:72:17:b0:4b:83:eb:aa:
d3:cf:59:f6:e9:c8:30:97:06:66:d7:c0:a1:43:52:63:c1:79:
0e:8c:65:ba:95:16:2e:72:81:1b:f5:38:f6:5c:95:e7:0d:e2:
c1:ee:11:e7:19:eb:a7:85:c4:b4:e3:26:e8:5b:34:f0:05:d3:
05:09:0e:d8:ed:93:21:f9:03:89:ad:7e:be:d6:ee:f2:6a:61:
a9:c0:95:9b:2b:3c:11:ec:0b:87:99:b9:91:d4:d7:8f:16:c7:
01:02:a6:fb:6e:41:29:28:55:07:1d:48:e2:90:16:a2:69:ea:
eb:e2:19:51:51:cf:b6:e9:14:4a:f5:85:28:e5:46:1c:36:c6:
4c:73:77:0b:d7:84:13:a3:85:e5:44:e8:05:00:e9:ce:f3:11:
2b:96:d8:22:c3:d7:d2:50:e4:2c:78:76:50:26:25:01:30:7f:
29:b2:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:41 2025 by rpki-client