Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.cer (raw, json)
Hash identifier: QwPikQcj4qygsa6nmByL1CSIPlxKBtjrsoOT+ZnaupM=
Subject key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AA02F649632DB44508B348C4798A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.150.16.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:aa:02:f6:49:63:2d:b4:45:08:b3:48:c4:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:b5:f7:8d:95:28:a6:ac:43:84:b9:78:a1:
7a:e4:03:61:69:66:9a:8c:15:0d:bb:cd:6c:30:f3:
11:08:22:09:9b:26:e2:cc:3d:e9:26:2d:d4:f1:db:
0b:bb:72:9f:21:a8:65:92:72:2e:14:9d:45:37:51:
fc:97:21:01:99:b3:ad:27:3b:da:57:f9:13:e0:52:
0e:ce:53:fd:2c:5a:2b:5a:e6:92:bd:ca:2a:47:42:
44:66:67:02:74:5a:d6:00:50:df:f2:98:55:25:61:
d7:85:a7:2a:f2:f7:4e:1c:a6:a0:87:d3:84:4f:07:
c0:ab:e5:86:a9:24:85:7c:5e:aa:a7:7f:8d:65:cc:
09:ca:9f:15:0b:5c:cf:e4:10:70:e6:9f:c5:b5:a9:
2c:64:11:ff:64:6e:5f:33:70:2f:1f:a0:41:c3:f9:
63:29:2e:68:44:72:da:d2:cb:17:9f:00:d1:c6:44:
77:7c:59:fc:9a:12:a3:5b:dc:9f:75:0f:04:57:e6:
d0:78:e4:7b:e3:db:f9:45:0b:c4:35:da:54:7b:43:
ac:de:72:9d:88:03:a9:2d:de:e4:5a:b0:86:52:3a:
ec:5d:d7:f7:2b:f8:e3:86:a5:8d:b1:3b:96:cb:e9:
eb:0d:31:18:6c:3f:fb:9d:c4:ed:e0:f9:5f:e0:a2:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1b:d1:a5:23:1e:9b:da:ef:82:b2:b0:26:58:ad:56:36:d0:
98:be:4a:27:e3:f9:6e:e5:5d:c6:bf:a0:36:fc:6f:08:d1:97:
89:be:6a:fd:1c:40:f4:6f:7d:de:9a:e1:83:62:48:0e:75:5d:
7c:d7:b3:fb:73:50:0a:34:f1:df:8f:25:8a:9d:9c:97:7a:02:
12:ca:31:a1:06:68:5f:16:0e:f7:11:6d:02:e7:31:84:d6:86:
c8:61:b3:2c:04:e0:a2:32:a8:49:c8:23:94:57:67:6c:5e:a3:
94:c8:e0:d5:01:11:88:3f:15:1f:90:a1:61:23:d7:6d:aa:f0:
69:7a:49:3c:cf:fb:e0:ec:f7:18:8c:34:dc:a8:70:79:72:89:
25:9b:dc:dd:14:eb:5d:e8:34:7c:0a:98:75:cc:53:6a:a3:76:
f9:92:f2:d9:47:cc:ed:8a:3d:7e:28:64:f5:3f:24:dd:1b:84:
a4:e0:de:43:31:36:9e:79:9d:88:e2:7f:f6:89:27:f8:60:5c:
a3:d1:53:36:d8:05:88:6e:4b:03:f5:eb:fe:64:9b:fd:77:21:
bc:d5:e5:e5:43:6f:d4:51:25:af:0e:61:10:26:49:65:9b:da:
67:71:ba:8a:7a:9f:9a:8e:0e:a5:e7:6b:69:80:4e:06:df:66:
86:de:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:20 2025 by rpki-client