Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.cer (raw, json)
Hash identifier: ZWJ8SiwCuh3c81b6TNaq3HmTognQkkdebcol4UoUakQ=
Subject key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067CFE7B674D61386023918966D98B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.163.198.0/24
IP: 2a11:5240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:e7:b6:74:d6:13:86:02:39:18:96:6d:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:93:c4:c4:07:f6:06:0c:54:6e:67:32:23:
5a:34:91:49:f5:ff:5b:ef:92:93:50:99:ef:c4:b3:
6e:25:d0:3b:5d:c8:37:bc:d8:2f:26:98:ff:45:9b:
ab:69:98:80:de:c3:9a:c2:f1:86:39:75:70:8c:6f:
08:bc:bc:5b:53:94:f4:f7:98:73:a3:d1:c9:31:53:
53:00:02:3f:30:5a:a3:ac:19:ea:d8:bb:90:6e:54:
cf:9f:c0:7e:36:99:af:2f:84:86:b2:56:31:80:12:
ce:25:b8:f3:c9:6b:6a:60:af:c3:67:e8:fc:17:ce:
0f:b7:50:9b:b3:b9:b5:db:3e:41:c7:18:06:8e:e7:
b4:24:cf:fe:69:14:ae:ff:a6:14:d0:9d:a5:b9:9a:
07:06:43:9a:00:35:1f:99:66:ec:83:a1:9a:a7:82:
c1:a4:75:a7:14:0f:e6:9b:fc:68:f7:d3:f8:15:51:
25:c2:55:09:80:bf:1a:6b:c6:93:cb:5a:3b:0a:f8:
9c:b0:a8:0b:24:fb:fd:00:3c:f7:f8:46:10:95:19:
50:11:29:7c:08:f1:8a:d2:c0:e8:8c:bb:ab:c7:28:
c3:d4:c3:e2:d9:61:9b:1c:0d:17:b4:04:b5:f1:c7:
39:e0:2a:85:49:d3:41:b6:90:93:31:a8:1e:08:0a:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.198.0/24
IPv6:
2a11:5240::/29
Signature Algorithm: sha256WithRSAEncryption
24:c8:18:bf:28:db:d8:c0:93:22:db:34:05:cd:6c:34:25:32:
8a:81:00:0d:4c:e0:44:96:f3:a0:d6:3c:71:c1:d2:a4:75:73:
83:55:68:53:e1:d0:3e:39:b9:ba:11:d7:17:e5:54:27:c5:b4:
cf:1e:c8:8f:da:4a:23:7b:7c:53:95:a0:48:d7:35:2b:5e:69:
b9:4d:72:36:8e:73:bb:e4:e6:09:db:39:db:b8:69:35:2a:74:
8c:65:a0:a5:a8:ed:cc:aa:27:60:4f:db:35:c0:10:d6:d8:76:
73:2c:46:47:ac:00:58:16:17:e2:05:da:fb:e2:3c:72:2d:5f:
7b:05:d1:b7:b4:3f:7b:28:8c:d4:7c:12:22:51:db:04:b7:65:
8e:1e:cc:36:70:01:58:03:4a:54:3c:b3:cb:3b:c2:e2:3e:ac:
38:80:e5:1f:3c:59:5e:c9:61:46:c9:c4:34:59:6e:67:2f:7c:
c8:80:7c:e0:8a:5e:b0:f4:5f:df:50:b9:d6:a3:58:3b:7d:30:
d4:50:7f:4e:ec:c8:ae:9b:67:71:52:d3:2b:25:57:33:24:76:
41:aa:ff:d3:d2:6e:1d:f6:2d:1f:6c:ca:bf:fc:13:4f:ea:35:
6c:27:12:79:0b:88:a8:1a:1e:a8:06:c8:07:aa:3f:53:84:ec:
a6:30:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:15 2025 by rpki-client