Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
File: PRH7pD9XqwRF5UL87suHaBZXzPM.cer (raw, json)
Hash identifier: XkdTCBNcsPTxmRtIVPCrqGCKW4Vp2qLSyIwtwHblm+Q=
Subject key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C0E9641414D1C6353149C3D168A5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62026
IP: 45.143.188.0/22
IP: 178.211.156.0/24
IP: 2a12:f380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:96:41:41:4d:1c:63:53:14:9c:3d:16:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:2c:18:35:d1:e4:82:0f:5e:16:7c:84:23:
04:88:f2:a3:fd:a1:1f:9a:15:c6:32:13:7a:95:ac:
b6:87:12:44:f4:5a:2b:5e:1f:38:fb:68:58:0b:2a:
d0:a0:c5:b3:45:f5:a8:f0:db:14:de:de:c0:52:41:
28:ff:39:88:4a:ee:f5:18:fa:16:7f:a9:99:10:c7:
a2:a5:03:55:be:2c:37:95:9c:7e:5e:2d:d7:11:d8:
e6:1f:4b:0e:3f:65:6f:6c:78:72:cc:b5:c7:98:9c:
c8:e7:d7:35:cc:de:5c:d6:24:ec:c8:46:14:f5:24:
59:fd:89:26:15:ef:2c:15:5f:a2:2a:e7:6e:82:a7:
04:ad:09:d9:d1:8e:ed:29:8c:13:28:49:12:66:f7:
e8:31:57:69:86:00:0a:03:dc:65:bc:b3:06:41:59:
bf:f9:d5:eb:21:46:c4:a5:c4:69:a3:48:25:57:3b:
ab:24:b6:a7:e6:69:36:2b:b5:3c:11:e5:92:b4:5e:
ec:5e:66:79:43:b2:5a:da:4b:f5:11:f2:d3:7e:5a:
d4:0a:83:21:b5:02:55:aa:9b:16:36:06:bb:a0:07:
de:b3:e2:84:e8:16:5c:e1:ac:67:d9:6c:dd:95:bc:
5f:01:60:98:17:3b:c4:3a:47:30:2e:90:82:6d:43:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.188.0/22
178.211.156.0/24
IPv6:
2a12:f380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62026
Signature Algorithm: sha256WithRSAEncryption
6d:89:48:c7:6f:9b:a3:7b:09:e3:8e:fa:b9:7c:e1:ab:45:36:
b4:4b:e7:b4:5e:6c:7c:38:f3:0e:4d:4d:43:1f:12:7b:78:09:
03:7a:19:8e:a9:4c:3c:b2:9b:03:79:d9:85:3f:25:d3:a6:f8:
61:06:6b:d4:80:64:ab:94:c0:b5:da:20:c6:e7:fe:29:de:c1:
87:15:1b:90:cb:71:8b:4f:87:67:3c:41:53:02:aa:6e:6b:b5:
50:30:d7:1e:8f:67:f6:40:48:4b:35:f3:47:7c:3b:e2:39:5b:
ba:43:9c:eb:b0:25:ab:e4:38:39:61:25:7d:e1:b7:1e:18:77:
8a:71:7b:be:83:5a:f0:5e:8f:0a:88:10:09:5e:b8:40:a8:4b:
44:f4:98:d5:c3:7d:8f:1a:84:16:51:ff:d9:3a:8d:91:5b:50:
d2:65:4e:48:62:d4:2d:ed:5f:59:8d:2f:a8:bf:e4:c5:32:34:
36:bd:e5:48:f8:8a:66:05:57:25:6d:9e:c8:08:19:74:56:e3:
20:a0:1c:82:c5:3a:2b:5b:f4:59:c8:44:3e:5a:51:52:ce:f6:
71:0d:6a:7a:cf:ed:40:4e:bb:a1:3d:47:78:92:b1:90:ae:f9:
f3:47:af:ed:4b:b6:05:c7:8d:dc:89:9b:0f:ba:f3:2c:2e:75:
af:0c:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:53 2025 by rpki-client