Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
File: pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer (raw, json)
Hash identifier: E+VUzBG3GTfAb/7VALDa9I5k8kSIZA63u+yvaJm0oh8=
Subject key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B237E191076CB0516E362B22942A03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
caRepository: rsync://repo.rpki.space/repo/Netiface/3/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60223
IP: 2a14:9e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:e1:91:07:6c:b0:51:6e:36:2b:22:94:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:80:5d:97:23:40:51:ab:0c:43:c4:62:46:
4d:f4:97:44:26:2e:2e:8b:e3:6e:a0:78:2a:e2:88:
28:ff:49:c1:9e:95:30:f6:a8:da:c6:33:23:7a:57:
48:d2:97:14:f9:0e:6b:21:c6:9d:1d:7f:6e:e0:ef:
8c:bd:b4:a2:2c:1f:48:37:79:d4:6c:3a:84:25:e5:
65:88:9e:16:8e:3d:6e:a9:bf:f3:32:67:00:22:34:
17:44:c4:d1:68:dc:1c:59:b4:74:3a:2e:c1:86:bd:
05:12:5f:2f:f0:60:df:ee:17:d4:0b:98:b8:dd:d0:
ad:aa:7e:07:a9:36:b9:2b:f4:89:ab:a4:83:ee:85:
fb:08:ff:4c:b4:70:d3:d0:e7:4a:e7:62:26:f1:91:
16:9f:cc:52:cc:82:b0:2c:4a:8d:73:49:83:e3:bc:
69:df:7f:be:11:15:1b:5f:08:d0:0d:14:29:a6:da:
60:7c:28:5b:21:48:ac:13:e1:4b:3e:d5:d1:ab:76:
3a:60:34:b9:3b:d4:9a:c9:50:c9:8f:48:e0:72:83:
dc:49:d1:4e:d8:ee:eb:57:55:d6:98:0e:6b:a5:ca:
72:2e:de:aa:37:27:65:9b:6d:e1:65:db:8d:65:a2:
a3:68:37:0a:85:d7:c5:26:2a:81:f4:b9:d7:c6:74:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/3/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
Signature Algorithm: sha256WithRSAEncryption
2a:a2:44:7c:95:2c:62:02:5c:3b:f7:e1:f6:c0:43:27:36:f9:
df:56:7b:8b:c8:9a:1f:30:8e:85:48:40:a1:cb:af:4b:be:c6:
3d:f9:79:ca:ad:14:2e:75:3e:73:56:44:10:1a:58:97:2b:9b:
bd:a1:f1:d0:f4:9f:59:cd:bb:31:69:ad:80:f9:d0:82:94:f3:
43:5d:53:47:4d:c7:9f:cf:6d:8c:1b:72:9d:60:c3:37:3c:88:
d6:39:ad:72:ce:f6:8a:12:2a:d7:88:e7:38:a9:ae:75:0b:28:
64:f3:e6:ba:79:19:c6:1c:07:6c:84:9c:04:a5:88:dd:35:8c:
d0:98:ad:af:e9:1b:e8:93:79:64:88:ab:d6:d4:66:bf:7c:a3:
05:49:8f:b5:dc:72:a3:35:21:bf:c2:58:5d:ca:19:91:c7:35:
fd:43:b7:84:cf:5d:be:f4:f2:be:b2:5d:c5:3b:b6:0b:11:7d:
e2:55:be:0c:9e:51:75:df:d1:40:11:4b:29:95:6f:94:1b:0b:
9f:8c:70:c3:04:1d:8e:73:18:b4:ee:95:ac:66:99:da:03:a9:
81:53:42:c0:52:2d:e3:fd:de:6a:e3:e7:91:0d:74:8a:39:81:
9e:31:08:20:af:60:21:84:bc:43:ec:99:42:4c:e8:73:4e:a5:
d1:d3:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:09 2025 by rpki-client