Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.cer (raw, json)
Hash identifier: /RdjyPPkSr+MstqbHo4TL6HLJhNZNGzOm6hx2h8Oh9w=
Subject key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F62F06FA1FBD9C2C7C712FA5F8AA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.50.120.0/22
IP: 2a01:a7a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:62:f0:6f:a1:fb:d9:c2:c7:c7:12:fa:5f:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:c0:90:9e:30:15:a7:6a:ec:c0:1f:51:2c:
a0:b9:2d:b3:80:4e:7d:1f:e0:7f:94:71:94:56:86:
d3:16:09:1c:02:39:e4:2d:34:2d:73:6d:46:28:98:
78:f2:d5:fe:6e:21:55:31:4d:7e:21:60:bc:25:7e:
30:dd:a5:f4:d6:2f:bd:31:26:3e:d2:a2:13:27:e9:
58:fb:fe:be:fc:11:f9:73:44:89:84:b2:a0:88:fa:
13:49:da:e9:5c:f0:51:d1:63:0c:f3:d6:d2:96:d4:
b8:c4:3e:95:04:66:eb:67:a7:8f:57:c5:da:47:0d:
30:4e:4d:c0:c2:41:11:b2:e8:13:34:ce:24:88:a7:
12:48:4d:b2:6a:f0:8d:36:03:50:56:ff:4e:d4:92:
b9:58:da:c4:74:f4:d2:35:e2:1f:f2:ae:fa:92:cc:
4c:e1:ab:4f:c6:58:ba:53:66:14:3c:34:a2:f9:9c:
33:a3:6f:f7:eb:dc:18:2e:42:8b:4d:bd:98:57:e4:
05:d7:c8:07:15:7e:63:cc:2f:7e:65:86:f3:74:82:
dd:29:34:bd:11:6f:1b:80:e0:9f:36:c2:79:ac:f2:
51:52:67:76:33:15:5d:ba:bf:18:9e:a6:34:b7:dc:
8e:e5:e0:94:c2:78:d6:f1:3e:ff:8b:ef:0d:9c:9c:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.120.0/22
IPv6:
2a01:a7a0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:0e:7f:b4:11:24:30:d5:a0:e8:bf:67:56:23:4c:ad:94:8d:
05:83:72:5f:6c:2d:ad:9a:f4:fa:c9:7b:b0:0d:45:c5:76:82:
a4:1c:d9:91:91:3c:52:c7:33:a7:c6:ca:ec:21:48:67:c6:61:
b1:67:f7:ed:fe:bc:99:cf:4d:8c:0f:38:ca:b6:61:9f:35:c9:
f8:73:be:69:6a:b7:7e:97:54:36:f4:a4:dd:20:e9:34:bf:7e:
ee:63:e6:18:13:51:4f:f1:03:43:52:2e:ec:a1:02:35:d8:db:
b3:df:2a:0d:69:9b:41:bc:57:5b:6c:e8:4f:54:52:d7:cf:2d:
ca:e2:af:4d:03:44:6c:11:df:58:f9:22:1d:12:6f:04:05:ee:
9e:48:39:79:fb:9a:05:b7:7f:69:94:bb:bb:b0:4c:14:49:61:
d8:96:1e:f2:46:75:ed:8d:a8:39:19:7e:b3:8a:df:ca:8f:68:
bf:ff:5a:4a:03:ba:86:34:e5:b7:89:bd:fa:fc:cb:b9:eb:e2:
f9:eb:d3:61:d4:e3:7b:2c:5e:13:7a:1e:1e:55:53:21:52:f0:
b2:83:51:9e:32:21:13:80:99:c7:f6:22:32:5a:34:d2:bf:2d:
31:ba:c2:5b:79:b5:34:24:7e:71:32:9b:bf:73:f3:e6:30:cf:
fc:ee:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:35:05 2025 by rpki-client