Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer (raw, json)
Hash identifier: zyuSAaLqo7wi+UaMamVUQN7SpgKX4tWHjR/rvK/NqA8=
Subject key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B19F3A0AC77DE4DA744C04671F7281
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.30.0.0/16
IP: 193.149.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9f:3a:0a:c7:7d:e4:da:74:4c:04:67:1f:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:88:0d:00:0a:a2:8c:8e:5e:11:ae:ce:d0:
d0:39:6f:7b:de:53:67:1d:ad:5e:96:ef:1b:34:b0:
63:f2:4a:d8:ba:7d:3b:6a:48:09:be:61:4d:f8:40:
1e:c3:ce:ff:ba:88:9f:ac:cd:54:a5:57:b7:44:6c:
c4:30:8c:c9:dc:ae:4c:73:35:48:23:f2:db:87:38:
ac:de:03:8e:d1:12:e5:4e:64:d3:57:66:4e:05:ca:
6b:e7:79:c9:fe:33:09:7d:22:b4:d5:ce:d1:9f:66:
76:e7:f6:8e:03:81:07:ea:84:a1:19:fc:c4:09:7d:
2e:af:9c:cb:d8:ed:cb:8c:77:82:ef:02:4e:05:31:
84:45:ef:ed:7e:ee:43:8c:0d:35:d8:0d:28:be:fa:
a0:1a:33:cd:af:11:94:0a:da:46:86:64:3d:fd:44:
8d:e9:be:0a:a8:17:75:e3:92:b2:6b:f9:e9:a6:69:
ab:c8:6d:fb:ba:8f:9f:61:2b:7e:3e:08:ed:5f:c5:
73:e4:a7:47:cc:6a:f6:95:ce:30:81:e5:b4:57:cf:
7b:34:42:78:0e:c5:32:f7:b6:5c:ca:9e:7a:f3:bf:
cf:64:a3:24:2a:48:47:c0:ae:39:06:44:55:0d:6b:
47:05:b4:2a:ad:2d:a7:46:aa:92:ad:de:4c:00:95:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.30.0.0/16
193.149.8.0/21
Signature Algorithm: sha256WithRSAEncryption
01:89:f2:a8:b8:49:57:cf:57:49:34:88:79:2b:aa:c2:e8:00:
3c:0f:8e:53:21:5a:b2:56:ac:9d:17:5f:0d:16:93:7a:75:a8:
0b:d8:17:47:2f:72:87:fe:4d:36:f8:66:f2:f9:14:7c:af:47:
b5:8e:f4:ec:90:be:42:1a:93:18:ad:fb:7f:83:95:16:1b:df:
52:13:45:b0:e3:0a:a8:e0:cf:88:bc:e3:12:99:9e:94:b8:ab:
5a:c1:0b:80:98:e1:04:9e:1f:38:eb:3d:a1:1f:a4:75:6d:d9:
38:36:10:e4:53:89:b4:3d:e3:5e:f9:13:c2:0a:5c:81:a7:a2:
41:01:54:45:ed:d2:cd:c8:4a:5f:dd:f7:c3:cb:71:7e:1e:b5:
c4:58:e3:f8:ed:37:e7:9a:cf:62:fc:91:b3:2f:6a:a2:2a:1d:
36:87:59:a1:19:3c:86:cb:a7:87:67:41:25:09:c3:32:42:30:
81:dc:b2:76:c1:25:8c:bf:01:41:ce:a8:99:50:3a:7e:ae:31:
11:3a:bd:55:d9:c8:67:cf:5f:c8:6e:b8:91:74:3b:94:44:47:
a4:32:37:4e:da:56:8e:60:06:c7:e3:33:4c:68:e3:e9:f5:b1:
58:22:0b:11:9d:de:18:60:7f:29:8f:68:1d:59:be:56:1c:8c:
fb:8d:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:04:58 2025 by rpki-client