Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.cer (raw, json)
Hash identifier: 93ZRYmBHN6yCCQ6c6rFuYDkc9JG+FhPiNdZztsfKdDc=
Subject key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1D81541376B66E993DE49FDDE3600
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.104.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:15:41:37:6b:66:e9:93:de:49:fd:de:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:54:ed:59:5d:f5:de:36:73:05:60:ee:24:
5b:04:35:da:c5:7f:5e:7c:69:86:6b:de:29:49:b0:
ba:3a:8b:29:a0:8f:96:43:75:5e:ec:7f:38:15:45:
cc:70:a7:31:e5:c1:0e:71:ff:40:b8:47:c0:43:92:
0f:46:d3:85:cf:43:58:12:30:86:01:ed:3c:87:2e:
75:12:6b:61:37:06:86:42:be:f6:3f:3e:8a:cd:72:
91:d0:fa:e3:6a:d1:b2:d9:0f:69:55:fe:23:2f:f1:
72:bb:0e:d8:5d:48:93:a9:f0:ba:34:bb:b9:df:49:
51:f9:2e:dd:3f:07:c7:f4:10:fc:73:82:10:42:2f:
a7:d1:89:04:cb:bc:75:bd:ad:e6:86:a8:29:fa:a9:
7c:93:88:d3:30:82:fc:fb:0f:05:c9:2c:f9:5c:6f:
70:12:94:7f:01:5e:1f:7c:76:6f:dc:ad:ad:19:63:
9f:6f:9e:43:c0:e8:87:00:0b:e9:d8:9f:61:d5:bd:
c9:3e:f8:21:af:17:5b:77:30:af:6f:34:18:48:7d:
aa:d3:44:64:fb:01:a3:6a:02:91:16:16:59:d1:35:
48:a6:b3:4f:5a:36:8d:45:84:fa:28:8c:e8:35:8b:
3f:b3:8e:9b:0a:2b:5d:f6:75:2b:41:2e:46:35:00:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:ae:58:05:7b:8d:40:ad:c1:19:09:5d:7a:f3:b3:54:68:ad:
45:95:5f:2d:4f:6b:79:a5:74:86:0d:d6:8a:98:12:65:3c:b7:
a5:ab:2d:aa:11:0b:59:d8:e8:86:b4:8c:be:60:dc:a4:9f:09:
e3:58:aa:41:6c:1c:4d:ce:da:8d:a5:cf:b1:0a:d1:fa:78:c8:
81:98:5e:a0:22:6d:61:e7:fc:51:41:97:7c:ac:b8:83:a6:78:
45:e2:c7:07:8c:8a:7f:5e:61:89:3d:cb:12:6d:0c:2a:10:81:
89:ce:39:86:b8:d4:3d:1b:f6:4d:ef:7c:25:22:02:60:db:b4:
a5:11:f6:e3:bf:8f:34:65:7b:9f:d7:a3:d4:4a:88:b5:4b:63:
d9:42:ab:dc:e4:64:a9:25:24:88:2b:73:88:35:38:17:e9:fa:
32:e9:fb:d4:56:09:dd:58:97:00:ec:d2:a6:11:ed:e7:d8:25:
73:da:60:45:51:9b:bc:38:82:44:cf:f5:d7:7d:71:79:0b:28:
a2:50:74:a3:68:20:09:64:2a:f5:00:63:56:99:28:51:1c:22:
24:99:ef:00:73:bb:34:40:9e:3a:98:68:a9:6b:40:29:f3:ce:
57:8f:0e:2c:a9:03:37:99:c3:39:50:26:ec:10:41:52:aa:ee:
54:5d:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:58 2025 by rpki-client