Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer (raw, json)
Hash identifier: cmdjagSm1IM7JFJPycMxdkRnxx0IY3trB/lzWSVVeg8=
Subject key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8018B4CE83382B3C97CB7353E92DAFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30962
AS: 31243
AS: 39123
AS: 41108
IP: 45.129.240.0/22
IP: 62.108.32.0/19
IP: 84.19.0.0/19
IP: 89.107.64.0/21
IP: 91.190.144.0/21
IP: 91.228.52.0/23
IP: 91.228.104.0/22
IP: 91.229.229.0/24
IP: 91.229.248.0/24
IP: 91.230.27.0/24
IP: 91.230.47.0/24
IP: 93.190.88.0/21
IP: 185.131.207.0/24
IP: 185.147.216.0/22
IP: 185.148.68.0/22
IP: 193.25.100.0/23
IP: 194.113.216.0/23
IP: 195.62.20.0/23
IP: 195.88.44.0/23
IP: 195.110.20.0/23
IP: 195.191.114.0/23
IP: 195.225.240.0/22
IP: 2001:67c:12a0::/48
IP: 2a00:f70::/32
IP: 2a03:f200::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8b:4c:e8:33:82:b3:c9:7c:b7:35:3e:92:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:c7:a3:21:c3:74:ff:9f:fd:53:aa:24:e0:
a3:6f:79:d8:af:e1:84:d5:55:c5:e9:64:92:a9:0e:
a3:35:e5:50:6f:c2:62:e0:24:84:e5:bb:3c:7d:a4:
c8:b9:1a:81:59:f8:53:99:8d:a6:e5:97:02:e4:d7:
bc:35:b6:5a:5e:aa:74:75:4f:8f:63:dc:89:30:ab:
b9:62:b8:94:dd:08:23:b3:6f:6d:c1:86:9e:c7:52:
60:63:04:d9:a1:fe:03:64:9d:2a:08:57:e7:5f:5e:
d9:26:5b:11:d1:ee:8c:e0:40:b1:c6:b0:21:08:77:
77:ed:0d:45:25:f4:f9:fe:49:44:05:2b:3d:22:28:
fe:84:92:ce:e9:e5:24:0c:9e:68:74:c6:b0:6c:0b:
d6:60:fa:3b:a9:25:20:f5:44:dc:4a:11:14:2b:e6:
f0:df:d9:97:82:95:fa:89:85:32:cc:4c:08:0e:d9:
db:32:6c:c6:a7:ce:d0:9b:47:ba:f7:6c:95:bb:f4:
05:af:d5:25:0b:a9:c7:5d:f3:80:ab:6e:44:48:8d:
65:f2:34:e9:a0:80:cd:f2:1f:fe:19:0d:82:40:5d:
c9:39:00:e7:19:d6:2a:3c:8b:24:f1:f9:3b:a2:0c:
0b:36:f9:78:71:ff:49:dd:6e:ec:48:7c:34:6d:50:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/22
62.108.32.0/19
84.19.0.0/19
89.107.64.0/21
91.190.144.0/21
91.228.52.0/23
91.228.104.0/22
91.229.229.0/24
91.229.248.0/24
91.230.27.0/24
91.230.47.0/24
93.190.88.0/21
185.131.207.0/24
185.147.216.0/22
185.148.68.0/22
193.25.100.0/23
194.113.216.0/23
195.62.20.0/23
195.88.44.0/23
195.110.20.0/23
195.191.114.0/23
195.225.240.0/22
IPv6:
2001:67c:12a0::/48
2a00:f70::/32
2a03:f200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30962
31243
39123
41108
Signature Algorithm: sha256WithRSAEncryption
79:1e:f0:ba:99:b8:cd:1d:ec:8c:8b:05:ef:2f:fb:dd:32:82:
f7:8d:f0:fa:5b:89:fb:f6:6d:89:82:d2:f2:62:4b:10:bd:34:
c2:67:ec:44:fe:c4:49:bf:86:eb:52:58:c1:35:9d:8b:4c:d8:
86:a4:7e:57:3d:d0:cb:fb:05:24:a1:c6:4a:c2:09:7f:e7:06:
8d:f0:9a:a4:ce:f1:75:5b:da:84:3b:71:63:72:53:a2:8e:76:
91:00:a3:43:9b:dd:6f:ae:f9:cf:99:0c:44:9e:93:e0:bb:16:
43:3a:18:1a:c8:e7:d4:a8:5f:f6:e8:9e:60:d0:39:7b:2c:d7:
8b:70:9e:56:bc:fc:b6:91:b8:a0:f5:4a:c4:7a:ac:c8:c8:8c:
64:82:07:f8:c0:2f:ab:27:24:92:68:37:a5:dd:46:f4:3c:bb:
eb:ff:bb:58:c6:fb:18:b7:20:f8:6b:80:de:ba:cd:31:68:7d:
83:2a:d6:04:32:47:40:d4:2c:42:c9:f9:e2:79:b6:ce:17:10:
f9:16:b0:48:a3:33:f3:6d:6a:98:eb:fe:b4:d4:fd:06:29:bc:
12:d6:71:99:1b:66:63:21:28:8b:50:58:ac:5f:00:76:84:35:
9f:3a:61:56:43:f3:1e:10:b1:ec:21:50:0f:ab:78:5f:a8:2f:
11:bf:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:49:51 2024 by rpki-client on console-ams.rpki-client.org