Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.cer (raw, json)
Hash identifier: /NI8lCuWjRS+MWTUjqrhhMrUQEYqQRj3rwCkkOkR/Gg=
Subject key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2E5DC9497B4816DF27A3C585529B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.71.100.0/22
IP: 2a05:31c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:5d:c9:49:7b:48:16:df:27:a3:c5:85:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:a3:18:f5:bb:a8:33:6a:db:2f:ec:b7:f4:
cc:6b:de:0d:ea:f0:1e:d0:79:59:bb:75:ea:d6:b5:
73:36:84:f2:84:6e:c5:c5:ec:fc:82:09:05:1c:fc:
e2:e5:86:00:c2:b0:ac:6c:2e:db:cb:8c:65:bc:6f:
8c:4c:b7:95:55:a4:65:e6:7c:ae:43:e4:e2:27:7e:
93:0e:93:00:fb:f2:19:fa:41:ca:5b:79:aa:9e:9b:
d3:f9:ff:89:57:c1:72:68:86:b1:68:8c:33:59:4d:
fb:d6:ed:72:8b:6f:9f:b4:cd:39:c8:64:af:43:e2:
1a:9d:87:12:3e:22:8e:1c:ea:1e:b9:55:4c:15:61:
0a:58:a7:9d:9c:07:23:a9:27:cf:92:33:39:b4:61:
dd:41:4a:9e:64:2a:ec:4b:fb:a7:93:c9:41:52:3d:
37:f4:34:54:56:03:da:db:e0:bb:c0:23:6a:ce:20:
5c:03:8d:62:c2:44:10:8a:8c:23:22:91:7f:26:7f:
37:b0:58:71:a2:59:52:50:98:69:e5:e1:97:65:20:
b1:99:58:11:fb:8d:fc:71:8c:f7:b3:d8:ed:3b:aa:
a2:e0:a6:f3:ad:f3:e1:c6:37:db:9c:cf:37:65:8e:
ed:58:e3:bd:65:54:ad:36:ad:d0:27:b9:1a:9a:3c:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.100.0/22
IPv6:
2a05:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:7a:db:52:41:b7:0a:da:c4:b4:a9:bd:b7:9a:16:ec:de:83:
b7:5b:13:62:96:d1:a2:1e:13:02:c0:19:16:83:72:6f:47:e0:
98:e3:65:35:1d:a6:14:c3:28:41:1b:e9:f9:c5:c3:87:e1:9c:
6d:bd:9d:0a:80:a9:da:9a:e3:6d:9d:e2:4f:46:9f:37:62:3d:
44:f8:06:89:d1:08:ba:c9:84:fe:86:82:68:60:bc:14:15:94:
56:e9:09:8a:4a:2e:3e:61:c8:ee:3c:7c:af:1a:8b:91:29:f9:
f1:ed:18:e3:22:df:bd:76:5d:e7:db:28:f3:77:3a:4f:0f:60:
77:1f:b8:cd:cc:99:11:a0:83:8e:0e:9f:c1:76:fe:a6:f5:14:
a4:d2:07:29:43:ab:76:c3:65:22:87:d1:95:a3:97:26:46:0b:
38:46:4f:fe:58:cc:e8:ce:d8:59:00:a4:55:ed:4b:5f:ae:e0:
5d:96:27:1e:dd:7d:76:04:a0:73:a0:de:29:c2:3c:4f:f4:72:
30:66:91:8d:45:eb:41:73:d0:6b:6b:b0:c0:a3:fe:09:75:83:
5b:7b:91:6d:56:a3:79:9b:fd:dd:d6:2f:40:b0:60:2d:1f:50:
d0:48:94:f2:8f:4f:eb:3e:7e:ae:91:45:1c:7a:3f:d7:36:b6:
fe:e5:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:06 2025 by rpki-client