Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.cer (raw, json)
Hash identifier: Vb+gMfaAncuHIapJKsnLAub/0sBGrrk2vvxCHa4YSDU=
Subject key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9924B5C4D9849C18C14B2BAC186CC72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 09:47:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206801
AS: 209137
IP: 5.180.168.0/22
IP: 185.170.136.0/22
IP: 2a10:c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:92:4b:5c:4d:98:49:c1:8c:14:b2:ba:c1:86:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:91:cf:f8:ed:bc:8e:a6:08:64:63:fc:b0:
c7:1c:fa:c1:a5:0a:42:82:41:a8:4e:e0:f9:20:aa:
4e:b8:e0:08:3d:be:16:e2:79:e9:c8:73:63:2c:90:
86:42:de:82:cf:ab:5f:4f:46:d3:1b:5b:e2:50:fe:
bf:5b:2b:21:f1:45:1d:3b:d0:e6:8d:e6:57:08:70:
06:5e:6b:d8:74:cc:4e:7d:0e:b3:20:97:bb:a0:51:
b2:64:37:1c:99:e9:d7:17:c2:6c:ad:59:d4:0b:0a:
3d:04:08:a5:15:fd:5e:b8:e5:cc:8c:77:4b:b5:d4:
8c:90:36:41:d7:cc:7e:d3:14:f7:83:ab:e6:aa:3f:
be:dd:0a:3e:fa:36:46:f9:67:74:bb:b8:85:b3:38:
2d:06:a3:4a:be:de:e3:4b:5d:d5:29:69:ad:12:df:
27:8c:53:95:f9:3f:7c:93:4c:b6:38:29:be:c4:33:
fd:27:30:11:3b:f9:64:60:c8:de:58:65:ee:b0:78:
20:2d:b6:4f:33:1c:13:a3:f1:7e:ff:5c:45:7e:d4:
47:ae:34:24:0b:87:ea:fb:db:67:98:9c:79:b0:65:
df:c9:03:19:6a:97:fa:66:06:12:de:6b:3a:93:d9:
57:25:4d:de:66:70:cf:d7:b6:c8:fa:fe:6a:e0:68:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.168.0/22
185.170.136.0/22
IPv6:
2a10:c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206801
209137
Signature Algorithm: sha256WithRSAEncryption
07:a4:a5:b4:bb:4d:ca:65:21:dd:b4:b5:7b:5c:44:14:59:61:
4f:f0:ca:fa:a4:9b:10:d5:85:02:c0:d8:d9:6a:cc:6b:19:fc:
cf:15:ec:1a:45:70:ca:e7:64:24:fd:60:f6:9d:65:ff:94:59:
88:63:de:e8:eb:bf:0d:11:46:25:ad:36:db:cd:6a:7c:1a:47:
51:2e:0c:d6:64:6f:72:20:91:bc:59:55:3a:5e:71:d9:18:19:
9a:bc:2b:e3:83:7c:16:38:1b:93:b7:46:5e:86:0c:f1:88:e3:
cf:e1:96:89:5a:5b:31:9e:7d:2f:fe:ec:05:eb:38:fb:30:38:
eb:dc:18:7d:85:96:bc:46:33:56:25:ce:1e:1b:9d:eb:12:d1:
d7:5f:86:f4:60:62:97:ce:9c:c7:2b:b1:ba:65:a0:f8:22:cf:
a4:66:b4:1b:c5:e7:c5:70:77:2c:84:23:50:9e:33:26:15:3a:
a0:58:cc:79:52:19:93:3a:e2:90:01:f7:27:af:cf:11:8f:b5:
cb:bb:55:e4:d4:12:b6:74:db:78:b4:80:4e:1e:6a:91:1c:0c:
c2:28:78:ae:d6:f8:5f:9a:c7:61:92:08:31:4d:c6:41:9c:49:
c0:fe:c6:2c:9b:40:21:97:14:e7:7e:94:36:1f:e1:68:10:a9:
d9:dc:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:05:55 2024 by rpki-client on console-ams.rpki-client.org