Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.cer (raw, json)
Hash identifier: JPnaDLyGXNB7qp5/BV39Qko3k5zkufW2iFxmu8GxgZQ=
Subject key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F8C9562B4D3A12C78F27908A6DE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.61.64.0/18
IP: 62.176.32.0/19
IP: 2a02:2ac8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:c9:56:2b:4d:3a:12:c7:8f:27:90:8a:6d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:5f:3e:82:8d:8b:ce:1a:f5:92:1c:92:a7:
c5:53:df:14:99:36:64:7c:54:7b:40:6f:f3:7a:3e:
d3:03:8d:d4:b6:7f:85:62:d2:2c:30:2f:fb:86:82:
21:3a:8c:39:f4:2e:a9:76:b0:4c:15:3d:7e:d5:2c:
d4:6a:b0:6e:5d:68:13:80:e1:93:5a:e8:25:0a:e9:
ab:e6:97:0a:7d:ed:0b:52:a7:b6:d7:73:4e:bb:9b:
83:c9:b4:92:af:fe:a4:47:df:e9:1e:70:29:c5:d8:
89:b5:03:42:82:7e:c0:1e:45:ff:37:a9:e6:c9:e7:
4e:03:36:69:f2:7c:f2:75:49:e4:7c:de:8d:42:fe:
c6:95:16:6b:17:64:83:db:31:48:48:61:db:4b:a8:
59:b3:48:fc:72:2b:ed:0a:d9:8d:99:8d:7d:e9:39:
38:3a:b4:1c:c8:55:5f:f3:1b:0e:76:29:27:4c:16:
62:e4:05:54:44:69:ba:ac:6d:ae:fd:7f:d2:4f:f3:
71:15:18:9a:2e:8a:31:45:a1:d5:39:21:79:98:b8:
43:fc:76:8e:52:a6:c7:be:10:fb:40:7f:ba:fe:71:
0a:0a:33:cc:85:1f:0b:be:32:ec:0d:a5:20:d9:35:
43:3b:7d:c5:b5:3e:4e:f3:4c:60:0c:72:cd:8c:c5:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.64.0/18
62.176.32.0/19
IPv6:
2a02:2ac8::/32
Signature Algorithm: sha256WithRSAEncryption
49:e4:7a:9a:43:7d:6b:55:6e:c2:62:2b:f7:da:39:ca:95:48:
43:01:17:92:8d:c3:a0:20:cf:48:69:0c:a5:2d:ef:bc:ee:0d:
b8:e0:74:47:4d:e4:b6:8d:86:c8:c3:d4:db:49:d3:e0:47:5d:
cc:b9:6d:85:9e:12:a5:d4:b6:63:b6:77:9a:38:4e:34:3b:86:
6e:2a:4c:04:fd:d6:e2:d3:61:40:0a:d1:76:b9:d4:18:01:50:
85:62:1c:fe:28:6a:28:93:e3:12:01:d4:88:de:64:67:39:36:
8a:ba:0a:a6:35:0b:6c:06:24:73:ff:5a:1b:3f:66:0c:c1:1c:
bf:b1:86:ef:2d:82:1a:a4:0d:78:06:88:58:dd:4e:b8:12:b7:
68:73:8e:b9:11:1f:3c:bd:c7:da:a0:90:9f:00:4a:6e:ea:f5:
99:f2:6f:03:75:f5:4e:a6:6a:eb:54:70:31:3d:c0:73:3b:ca:
02:6f:75:ff:1a:cf:d5:b8:c1:1e:97:f7:c4:b0:c1:82:e0:eb:
13:f8:94:00:c4:ad:84:fb:48:58:22:8e:7e:39:59:0e:3f:e5:
6a:de:62:0d:68:ca:88:4d:e4:9b:06:be:1f:9e:05:05:9e:36:
57:e5:13:b6:90:ad:e4:96:44:e4:93:bd:02:02:af:3f:c8:a2:
a3:96:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:22 2025 by rpki-client