Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.cer (raw, json)
Hash identifier: JWIif967bZX9RumMBg+kZcfGxQ1qeYN/pTAxQwlEzWA=
Subject key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8014C6691969D4D6E74C7EE644FDF1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199348
IP: 45.86.148.0/22
IP: 46.31.132.0/22
IP: 176.105.152.0/22
IP: 185.20.64.0/22
IP: 185.76.140.0/22
IP: 2a04:1540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 01:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4c:66:91:96:9d:4d:6e:74:c7:ee:64:4f:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:48:75:ae:ba:51:12:dc:f7:ff:b1:0d:fa:
41:c3:74:28:90:69:64:25:ef:1f:d9:33:5a:e0:e6:
83:49:d6:86:e3:80:69:98:fe:6a:be:eb:98:e4:af:
5f:25:ec:9e:15:98:9c:69:ed:a9:6a:87:80:36:53:
e6:c5:5e:92:8f:e8:48:fe:3f:48:7b:82:d8:c5:b2:
20:7a:ea:ca:21:29:24:1a:5f:0b:02:bf:82:09:01:
f1:ab:45:95:94:f4:4b:2d:a5:dd:74:2e:29:1c:03:
70:41:de:68:e4:e5:59:ff:15:5d:0f:ed:8e:b1:25:
98:6f:6b:0d:bb:8e:8d:a7:54:69:a5:ce:a7:5f:43:
7b:8d:af:c5:8a:8c:ce:7e:3d:f8:8b:0d:ff:53:51:
70:d1:c2:d6:42:1f:b8:c7:aa:c5:6d:f4:9a:47:96:
8c:0d:0c:81:38:e1:0d:9e:28:6c:a4:56:41:b6:d8:
c1:a5:f0:a3:e0:36:59:e9:56:66:cc:be:be:50:0b:
b1:24:95:a9:c3:f2:d5:3e:a8:df:b5:92:5d:2c:28:
f0:00:c3:6c:2a:04:2a:fb:53:08:22:89:8f:7d:32:
d5:e9:11:bb:f1:f6:ec:e0:61:f5:b7:37:e4:3a:a9:
ec:e1:1a:26:3a:0b:c9:7a:89:5b:93:b5:27:00:92:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.148.0/22
46.31.132.0/22
176.105.152.0/22
185.20.64.0/22
185.76.140.0/22
IPv6:
2a04:1540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199348
Signature Algorithm: sha256WithRSAEncryption
19:b5:2f:54:ae:2c:d0:9f:84:b6:0f:d7:63:ba:6a:e6:0e:0d:
68:87:29:20:c3:ec:b9:8a:ef:ee:36:30:48:e9:c2:38:3d:05:
35:78:7e:7b:f8:cc:3a:da:d8:cd:c5:8b:11:e8:a7:0d:50:f4:
3a:19:5e:be:ff:c1:e8:a3:76:7f:76:cc:01:df:9c:68:5b:fd:
2b:26:e3:67:c2:07:5a:ee:08:3c:4c:3a:f8:f4:87:35:03:7f:
0a:08:6b:71:03:fd:a4:45:37:1e:d3:19:ed:08:1b:b3:a6:6b:
6c:77:88:de:c1:b8:a9:7f:32:20:7d:d6:33:b2:dd:79:da:34:
66:b0:ef:9b:4e:4b:bc:e7:28:d3:22:b7:d0:b6:49:7a:c4:fe:
91:92:0b:cb:c4:32:a6:7e:3e:33:ea:05:97:62:8d:dd:21:a7:
ef:1b:8f:3b:92:be:34:16:14:6b:27:39:09:dd:0f:c3:91:ed:
b0:c8:5e:e6:33:38:ae:7a:be:3f:95:d5:9d:93:db:6c:f8:39:
f1:2d:74:fc:90:71:1b:a9:81:d5:cc:3a:33:5a:6d:92:32:e4:
ae:30:92:d3:3a:2d:32:4b:c5:0f:12:c0:c8:38:5e:1e:41:ba:
02:6a:8a:1e:44:90:75:e7:19:53:2f:5b:a9:3a:2c:08:66:24:
15:97:00:d9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzIAUxmkZadTW50x+5kT98fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDRjZjA3YzdkMDU5MzAyYjU2MDY2YWFmNmNiZWVjMTM1MTg2YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG1Ida66URLc9/+xDfpBw3QokGlk
Je8f2TNa4OaDSdaG44BpmP5qvuuY5K9fJeyeFZicae2paoeANlPmxV6Sj+hI/j9I
e4LYxbIgeurKISkkGl8LAr+CCQHxq0WVlPRLLaXddC4pHANwQd5o5OVZ/xVdD+2O
sSWYb2sNu46Np1Rppc6nX0N7ja/FiozOfj34iw3/U1Fw0cLWQh+4x6rFbfSaR5aM
DQyBOOENnihspFZBttjBpfCj4DZZ6VZmzL6+UAuxJJWpw/LVPqjftZJdLCjwAMNs
KgQq+1MIIomPfTLV6RG78fbs4GH1tzfkOqns4RomOgvJeolbk7UnAJK1uQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFABM8Hx9BZMCtWBmqvbL7sE1GGpEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzRmMzdh
OC1iOTM3LTRjNmEtOTkxMi02ZTU0NWI2YzQzYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNGYzN2E4
LWI5MzctNGM2YS05OTEyLTZlNTQ1YjZjNDNiMC8xL0FFendmSDBGa3dLMVlHYXE5
c3Z1d1RVWWFrUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCLVaUAwQCLh+EAwQCsGmYAwQCuRRAAwQCuUyM
MA0EAgACMAcDBQMqBBVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMKtDANBgkq
hkiG9w0BAQsFAAOCAQEAGbUvVK4s0J+Etg/XY7pq5g4NaIcpIMPsuYrv7jYwSOnC
OD0FNXh+e/jMOtrYzcWLEeinDVD0Ohlevv/B6KN2f3bMAd+caFv9KybjZ8IHWu4I
PEw6+PSHNQN/CghrcQP9pEU3HtMZ7Qgbs6ZrbHeI3sG4qX8yIH3WM7Ldedo0ZrDv
m05LvOco0yK30LZJesT+kZILy8Qypn4+M+oFl2KN3SGn7xuPO5K+NBYUayc5Cd0P
w5HtsMhe5jM4rnq+P5XVnZPbbPg58S10/JBxG6mB1cw6M1ptkjLkrjCS0zotMkvF
DxLAyDheHkG6AmqKHkSQdecZUy9bqTosCGYkFZcA2Q==
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:26:28 2024 by rpki-client on console-fra.rpki-client.org