Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer (raw, json)
Hash identifier: q4N4Z4f6/pNvTgE6TfYl29X98YmUgp7X6jVkeGiIghI=
Subject key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72579D492EF9FFE3CC1D21D8F528840
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.200.86.0/23
IP: 194.0.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:79:d4:92:ef:9f:fe:3c:c1:d2:1d:8f:52:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:f2:60:7a:6a:02:dc:12:b7:89:c7:30:e3:
57:d0:5a:de:02:e0:af:d7:77:45:27:6c:a7:05:80:
73:20:fd:d8:86:d2:fe:87:f7:e8:1c:a5:9f:22:89:
55:7e:04:2e:f4:e4:9b:1a:68:6f:1e:03:c3:79:54:
87:b7:ec:b1:94:65:0d:63:83:59:07:51:38:52:e2:
a2:bd:d5:8f:f8:d6:0b:ef:b1:bb:7b:80:56:c0:97:
a8:71:d4:55:b7:21:0a:25:2c:3a:ce:31:51:0b:51:
b0:5a:b5:a3:4c:6b:f7:a2:b1:b8:e9:f8:d0:d8:80:
26:a1:9c:55:9a:dd:e9:bf:58:da:12:34:44:63:f9:
e1:90:9b:47:61:28:96:e4:7f:7c:95:8e:fe:66:2f:
26:c5:6f:b2:67:13:20:2b:df:a0:5b:29:d6:88:f4:
f1:cf:d8:2c:cf:4b:7e:68:8c:63:4c:a2:27:09:02:
7f:51:bd:f1:fd:77:4f:32:83:af:46:5b:84:4c:51:
6a:a5:d3:27:45:9a:7e:87:96:5d:ef:e4:92:b1:27:
7b:99:39:c1:bb:31:f8:ea:54:4f:14:65:24:c9:68:
41:e8:fd:c6:4f:a3:bf:c8:22:d8:fd:1c:d5:fd:3c:
df:06:44:e5:fa:fa:aa:cf:fa:f4:21:a4:f4:dc:68:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.86.0/23
194.0.246.0/24
Signature Algorithm: sha256WithRSAEncryption
80:74:b4:b0:d8:f8:4e:d4:d7:72:d1:d4:d2:67:54:76:32:1b:
64:9e:27:b8:fd:f6:b9:ce:fe:65:63:7f:17:40:d5:66:b8:75:
02:cc:3e:22:ba:bb:33:1e:dc:fa:a4:5b:17:29:9a:7d:03:8d:
2f:88:f1:a6:9c:b5:2e:f5:68:31:24:dd:03:e7:6a:33:ea:f2:
8c:d8:20:1e:2c:17:0a:9a:1d:cf:b9:2d:e5:2f:ce:7b:ef:1d:
d1:9b:fb:41:bb:84:36:ac:33:b1:08:30:49:1f:d0:eb:92:c9:
6c:54:a3:f2:78:b2:9e:60:74:68:71:d5:87:09:cb:af:84:bc:
d1:8c:7f:85:ad:65:7b:1e:b2:b9:25:fc:d8:5d:28:fe:50:68:
ea:5c:12:0e:b9:79:57:26:04:d6:2c:f6:b9:c6:b7:ba:74:da:
0c:cc:33:57:ae:3e:79:15:aa:f5:bc:d6:6d:bb:bb:75:a8:39:
88:b5:d9:e4:40:0a:de:19:76:7f:53:1b:bf:ad:e3:87:4a:48:
45:b6:91:a5:08:0d:1c:f4:bb:18:37:1b:73:d7:a3:da:01:7c:
ef:f3:a6:82:6b:21:ac:77:1b:b6:5c:e6:60:80:aa:0e:81:bf:
78:93:f7:05:41:b5:b3:8b:d9:db:45:94:72:51:e3:60:4d:c9:
1a:39:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:44:01 2024 by rpki-client on console-ams.rpki-client.org