Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer (raw, json)
Hash identifier: jXIf/BKLeu8QGm1CcSMPqKTUq8g/E4Mr+Q5HDMXaqN4=
Subject key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE8DF8C9F41EA6A183048F6C4F3C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9056
AS: 25371
IP: 217.9.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e8:df:8c:9f:41:ea:6a:18:30:48:f6:c4:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:46:4b:36:64:28:79:b2:50:cc:c4:c7:f9:
91:99:8e:e6:0a:ac:43:15:7d:b8:76:6c:c0:48:96:
f2:27:68:1e:eb:fc:db:1f:cb:ce:18:0c:2c:13:b8:
71:ff:fc:a4:c3:ab:13:2d:d5:94:c8:75:b3:dd:24:
fa:c9:e6:df:f4:ac:ed:45:9e:e3:9a:9a:b5:95:7e:
32:24:80:b7:5b:57:68:e5:12:04:8d:68:ba:72:24:
a0:7f:f8:5c:10:86:5a:d4:c1:3e:bd:97:45:ee:ca:
a4:00:15:03:44:37:a8:c9:47:49:5f:0f:4e:eb:5e:
66:5f:36:dd:df:89:ef:49:5e:de:e3:b9:eb:8e:cf:
c8:7c:49:d7:f4:e0:1f:9a:b7:46:a0:52:d0:36:10:
dd:2d:93:ff:a5:1e:84:89:0b:3c:df:78:10:e7:07:
62:db:11:5f:ad:36:79:57:fc:6d:e8:45:70:36:d3:
9c:41:25:e3:ea:3c:49:a4:cd:54:4a:67:b0:7a:ee:
b8:b0:05:b4:06:19:53:88:bb:7b:56:7c:01:2d:cf:
7e:b7:e1:13:38:65:31:bf:01:bd:33:51:7b:a8:72:
45:30:b8:c8:56:c4:ce:b1:f0:13:bc:85:90:4b:03:
16:a8:1b:7e:9e:54:e4:ca:e4:a7:76:41:81:78:ef:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9056
25371
Signature Algorithm: sha256WithRSAEncryption
a7:0a:67:e7:53:7d:fc:9e:bd:37:a1:bf:24:81:6b:85:bd:5c:
28:d0:d4:fa:dd:ee:63:28:77:e2:a9:97:c0:ce:3a:09:de:a9:
57:65:d5:99:93:fd:ef:eb:c8:4b:90:83:87:09:de:fb:fa:8c:
98:a9:e8:d3:a2:3d:5a:bb:1f:7f:f9:0e:d9:93:97:a1:1c:fe:
18:8b:29:d0:0a:81:83:04:af:f4:60:3a:33:be:00:41:ba:de:
01:7b:5a:b1:09:e2:0b:77:b5:d6:f8:4b:cc:3f:63:e8:63:60:
58:6b:d7:84:dd:3a:b4:09:55:bf:0c:94:9e:78:dc:48:70:e0:
29:73:90:d7:78:30:e6:ba:23:12:42:f8:4c:2a:2b:12:d5:d3:
b9:a1:a4:d7:7e:0a:09:4d:40:09:23:9a:20:92:22:bc:01:32:
64:45:97:39:83:14:25:41:e8:ac:28:b4:ca:65:3d:82:92:fa:
5a:d8:15:22:a5:fd:c2:ed:4d:48:8c:bc:96:f5:cb:f5:89:64:
b7:ea:da:9e:bf:00:f3:00:ca:b9:69:65:7c:8d:44:d6:b1:c1:
5d:26:27:4d:63:96:9e:b6:93:72:35:4f:70:70:1a:76:7c:e3:
b0:f0:cc:ed:d8:54:1b:1c:da:0f:95:8b:40:37:5d:6a:db:fe:
fd:a8:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:16 2025 by rpki-client