Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.cer (raw, json)
Hash identifier: AYF8WGZQWLmj8h+7cxyHKsT/sciZSJrYKVjAVbApyV8=
Subject key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521F1C9E60CFE0B04D0F0B36658BE47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212808
IP: 185.175.88.0/24
IP: 193.169.59.0/24
IP: 2a10:45c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f1:c9:e6:0c:fe:0b:04:d0:f0:b3:66:58:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:0d:b9:74:12:47:aa:93:9d:95:97:50:17:
68:e2:d3:a4:e2:4f:e5:53:6c:9b:57:ee:81:0f:ce:
1f:dc:a5:eb:27:e4:0b:0c:88:be:da:29:4e:e2:12:
f1:14:7d:4f:1b:63:12:04:d5:b4:dd:28:4a:d1:ec:
7c:ff:12:40:26:c7:c4:9a:33:04:66:c8:01:f8:48:
81:50:62:e0:6e:c5:54:b7:2d:6b:9d:88:7c:8b:c5:
94:33:5e:83:ad:ba:a6:17:5e:46:b8:89:53:a0:cc:
46:3c:5c:aa:9f:02:76:69:77:ec:33:7b:94:57:7f:
10:79:c0:73:10:38:bb:ad:74:49:86:58:ff:06:ec:
0e:e6:16:63:ee:d0:21:0c:41:1a:26:ea:b0:fe:98:
a6:ee:9f:f6:67:15:d2:3b:a1:7d:63:5f:98:9e:c5:
69:5b:95:4a:e1:ef:16:ba:9d:ce:6e:11:cf:e5:95:
c0:25:83:b8:53:97:56:c5:6e:1f:4b:0a:7c:91:78:
f3:4c:ed:73:c1:b7:1e:0d:74:01:bf:12:0f:ca:89:
40:16:40:62:a1:30:23:92:07:b4:23:26:fc:d5:b6:
10:9c:63:06:c2:0f:dc:05:3d:8d:9a:40:e7:3e:b9:
4a:52:28:36:73:92:bc:37:13:68:1e:61:20:d9:c6:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.88.0/24
193.169.59.0/24
IPv6:
2a10:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212808
Signature Algorithm: sha256WithRSAEncryption
27:bb:10:11:c8:88:1a:27:68:6b:75:8a:44:5c:1f:d2:e5:60:
18:b0:97:05:f3:c8:35:60:30:f8:36:ae:8b:45:42:a2:c3:f8:
fa:0c:74:31:7c:ab:d9:b1:60:39:9d:a9:20:39:68:23:53:ba:
e1:92:b2:4c:c3:51:37:ae:3c:58:f1:a2:e5:18:6d:f3:86:9a:
58:8d:12:30:01:e2:7e:29:cf:80:c7:77:9d:79:6f:6b:58:e2:
87:72:5e:f4:f2:0b:9f:2c:98:e8:bf:ef:7f:be:e5:b5:d2:8b:
05:0c:b3:79:60:4c:ce:4f:95:e3:d6:0d:6d:dd:b3:02:ab:46:
6d:2c:4d:79:a0:2c:25:70:2c:55:24:50:b8:33:10:f9:a8:18:
2e:1e:68:4d:35:0e:02:eb:4c:3d:59:59:11:5a:ab:da:dc:2b:
89:65:1d:36:b7:ba:bb:01:c0:c1:40:2f:51:ec:7f:13:15:93:
85:6a:44:21:32:0c:1d:ea:20:d6:7b:f8:74:39:69:bb:e5:4d:
14:90:8f:ea:da:13:1d:b2:b0:0f:4f:31:9f:1c:6d:d7:ef:49:
3e:1b:c1:62:5a:27:9e:03:38:85:e6:f8:f6:40:82:2d:96:68:
f2:56:29:82:28:b2:41:d6:b3:4a:7f:27:8c:46:e4:ce:ab:82:
24:be:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:13 2025 by rpki-client