Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.cer (raw, json)
Hash identifier: ieR5l8N1br/ANiPIRUOJhjHz7kWtTR8lXXSvgxFENyM=
Subject key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521BCFAB32DE17D7DC0846079367D2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203343
IP: 185.120.24.0/22
IP: 2a0f:a5c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bc:fa:b3:2d:e1:7d:7d:c0:84:60:79:36:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:e2:d0:2d:0b:04:61:e5:c4:5e:2e:36:61:
22:16:1b:06:9f:e0:df:22:2a:8f:5e:64:bf:8a:a7:
09:0b:fd:6c:5c:24:74:d7:34:ef:50:ec:c7:79:d4:
7c:30:4d:5f:78:43:54:d5:7f:66:a9:ce:48:6e:92:
f6:6c:25:18:df:23:96:30:5e:79:82:d2:fb:9e:89:
60:b3:a5:16:0a:0e:24:31:9e:ca:12:6d:23:01:da:
0b:59:87:ba:5e:3d:00:99:ed:91:61:d2:1c:d4:24:
62:5a:ff:ab:53:42:f9:b1:e1:e4:e6:9b:f0:92:40:
01:42:79:66:7a:07:d9:dd:9f:3c:4c:a6:9f:3b:9c:
90:e1:27:60:91:5c:6a:b4:7f:3c:a4:be:b3:2e:7e:
a3:14:b5:9a:6d:b2:55:b3:5f:f6:4c:f5:29:1e:8c:
0c:74:2d:61:1f:22:83:87:8b:90:44:06:65:9c:f1:
1f:91:31:08:27:37:fe:d4:26:e6:40:2f:88:f4:9a:
26:69:0f:a2:57:31:9c:a8:a3:2d:79:2b:e3:c1:3c:
fd:e7:10:87:b5:e5:0a:1a:09:1a:71:c4:7e:c9:f4:
83:2e:d5:d1:ef:50:88:60:aa:24:5f:89:ad:c2:d4:
eb:c4:c0:8e:f5:f3:b9:ed:86:6c:fc:87:b3:01:d7:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.24.0/22
IPv6:
2a0f:a5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203343
Signature Algorithm: sha256WithRSAEncryption
16:79:73:97:5e:fc:16:78:05:2b:6b:66:16:f5:85:2c:48:7c:
ba:11:c4:fb:14:be:51:53:56:87:21:08:ba:16:b8:89:5b:36:
fa:d5:bb:e2:f3:bc:b3:63:7a:99:93:89:ee:6e:a5:5e:15:8e:
67:dc:e0:2e:0e:53:b4:9e:35:b1:ab:c1:00:a7:14:c3:19:32:
09:c0:b9:87:e0:86:ed:dd:16:76:5c:ea:0f:af:c0:d9:8a:44:
48:27:27:7e:b4:19:01:6a:fc:0d:ad:aa:d3:c7:59:85:f1:73:
aa:53:36:b7:80:5d:9c:a4:91:23:38:33:7e:b6:0e:ea:7a:93:
88:93:a8:2b:45:ac:a2:76:3a:98:d8:4f:03:31:62:f2:5a:c4:
7f:6f:03:90:e0:bc:fd:e6:f1:c6:3c:64:3e:e8:93:03:47:f1:
4b:51:6e:2f:fd:6b:24:e1:2a:68:97:46:6c:8a:e1:31:59:90:
d4:40:9a:0c:c7:d9:b4:4b:9f:87:1f:b4:c1:8f:20:3c:2a:c3:
b0:67:b1:db:46:64:fe:a5:1a:de:d7:cd:fe:58:f8:34:ab:80:
c8:80:bf:04:fb:2a:8b:b7:7f:15:c9:5f:97:1a:c9:83:1c:7e:
f9:4d:4f:4f:16:8d:3d:49:5c:ee:38:b7:cc:e0:9a:08:3c:a1:
e1:f9:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:24 2025 by rpki-client