Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer (raw, json)
Hash identifier: CTYR+zpbO8shTknAufbJhgkzzeuD2tGWk4QDg/Menxc=
Subject key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B688AA6739EF813A6B5BD2DF4BFDA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.30.0.0/16
IP: 193.149.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:88:aa:67:39:ef:81:3a:6b:5b:d2:df:4b:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:88:0d:00:0a:a2:8c:8e:5e:11:ae:ce:d0:
d0:39:6f:7b:de:53:67:1d:ad:5e:96:ef:1b:34:b0:
63:f2:4a:d8:ba:7d:3b:6a:48:09:be:61:4d:f8:40:
1e:c3:ce:ff:ba:88:9f:ac:cd:54:a5:57:b7:44:6c:
c4:30:8c:c9:dc:ae:4c:73:35:48:23:f2:db:87:38:
ac:de:03:8e:d1:12:e5:4e:64:d3:57:66:4e:05:ca:
6b:e7:79:c9:fe:33:09:7d:22:b4:d5:ce:d1:9f:66:
76:e7:f6:8e:03:81:07:ea:84:a1:19:fc:c4:09:7d:
2e:af:9c:cb:d8:ed:cb:8c:77:82:ef:02:4e:05:31:
84:45:ef:ed:7e:ee:43:8c:0d:35:d8:0d:28:be:fa:
a0:1a:33:cd:af:11:94:0a:da:46:86:64:3d:fd:44:
8d:e9:be:0a:a8:17:75:e3:92:b2:6b:f9:e9:a6:69:
ab:c8:6d:fb:ba:8f:9f:61:2b:7e:3e:08:ed:5f:c5:
73:e4:a7:47:cc:6a:f6:95:ce:30:81:e5:b4:57:cf:
7b:34:42:78:0e:c5:32:f7:b6:5c:ca:9e:7a:f3:bf:
cf:64:a3:24:2a:48:47:c0:ae:39:06:44:55:0d:6b:
47:05:b4:2a:ad:2d:a7:46:aa:92:ad:de:4c:00:95:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.30.0.0/16
193.149.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:07:10:42:b2:df:c1:04:aa:24:c4:72:94:27:71:f3:7e:27:
9b:82:a0:91:ca:cd:40:1d:fc:81:da:7a:6f:fd:30:cf:f4:9f:
e3:5b:e1:10:aa:da:a8:e7:e8:78:67:d4:2c:40:3f:31:08:9b:
f8:3f:52:05:03:81:6f:c7:0f:f1:59:a3:36:3e:47:f7:01:2f:
2b:95:9f:79:6e:cd:da:40:2c:69:bf:e4:1c:21:2f:e1:ae:36:
17:9d:9f:21:63:6d:31:b1:62:72:af:33:c8:19:b0:f3:82:a2:
af:a6:65:e3:03:db:36:7c:a8:08:5d:f4:bf:a8:b3:a9:9c:c7:
95:d4:0f:f0:d5:81:c8:0f:5a:f1:f4:eb:42:03:68:2e:e4:9f:
0a:2e:bb:8d:d0:e1:f6:6d:08:30:28:a7:79:ef:85:91:e4:fd:
bb:1e:01:bf:37:6b:a3:b3:05:bb:8d:27:84:b0:13:26:da:3e:
1a:23:95:38:94:a8:13:81:d6:3b:17:df:80:34:ac:18:c5:c1:
fc:37:86:5b:e2:67:a9:05:38:04:93:01:1d:0b:ea:d2:cc:e0:
10:37:b4:e2:a0:c6:2a:ec:12:03:88:66:53:b3:dd:10:34:52:
f2:a9:c6:a4:0e:c5:ac:e2:3d:76:a1:bc:98:e2:10:d6:80:00:
9c:29:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:31:07 2024 by rpki-client on console-fra.rpki-client.org