Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer (raw, json)
Hash identifier: mOERw6CvIMUBipgEpEVBQ4vBMevuq9YNbsjNsb3CYyo=
Subject key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72771DD8DFEDD91779364FA977220C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197800
AS: 207156
IP: 185.238.204.0/22
IP: 194.15.120.0 -- 194.15.124.255
IP: 2a14:5e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:71:dd:8d:fe:dd:91:77:93:64:fa:97:72:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:38:ca:c1:b2:6b:dc:24:51:3e:39:7d:10:
19:78:0b:a7:84:91:d2:31:c7:4a:32:36:da:37:c9:
fb:23:ae:13:71:a0:8c:11:53:2c:46:e5:8a:de:63:
0a:d7:fe:46:1e:f9:6a:c6:a8:d4:ad:29:18:64:86:
23:ce:70:21:b1:68:14:8b:c8:70:5e:88:2e:37:fe:
18:94:08:6a:cc:fb:4d:4a:f3:9d:7c:39:8f:39:16:
63:5a:d8:3d:59:1e:87:72:68:82:1f:a1:06:cd:8c:
06:31:87:32:92:c3:5d:a5:5b:34:60:dc:4a:a2:0c:
38:9e:4c:66:dc:13:2a:5d:44:1e:00:68:67:ab:1c:
d3:52:5f:f8:ab:92:7c:c7:97:f9:cc:c2:0e:d7:68:
02:f6:7a:01:87:56:2a:a4:38:ab:35:50:71:7d:7b:
a0:ab:b8:67:e7:1f:64:49:98:28:ec:d8:a5:74:fb:
bb:d3:ff:f3:53:44:cc:6f:7c:95:45:ab:f1:69:23:
48:e4:0b:8e:12:6d:46:88:11:78:21:b5:14:4c:ba:
a1:34:31:2a:d9:b1:4e:93:24:8c:c5:8c:81:a7:22:
2c:57:a7:3d:e2:8e:72:38:ec:97:40:4d:8e:6f:ca:
df:d0:8b:05:76:33:c0:ee:69:b5:c3:91:8e:5d:5f:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.204.0/22
194.15.120.0-194.15.124.255
IPv6:
2a14:5e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197800
207156
Signature Algorithm: sha256WithRSAEncryption
8d:12:70:e6:4d:bc:77:ed:00:63:19:8b:b8:8d:70:89:53:da:
f6:12:c6:bd:d6:a8:20:45:bd:83:8e:7d:c2:41:a6:49:6a:03:
fc:b9:d0:11:ec:ee:77:05:82:c5:a7:a7:8a:98:6c:cc:fe:aa:
90:6b:74:42:ae:06:0a:62:8a:fb:ff:0b:3e:eb:b7:f0:e1:e9:
f2:d6:3d:e9:93:bb:3f:0f:f8:36:07:07:c3:ea:d3:cb:ea:93:
0b:fe:73:68:da:75:80:53:b4:3d:33:1c:d1:88:b2:fd:c0:0d:
cb:00:cf:8e:6e:1e:4b:d4:63:bb:f2:e3:83:73:bf:0a:cd:dd:
ca:1c:02:14:76:94:45:d6:95:e5:78:b9:ef:fb:d8:40:e3:48:
31:7b:8c:55:b9:3b:14:76:49:04:37:20:76:94:30:a1:c9:33:
36:7f:9d:16:0e:bf:50:3e:4c:0d:36:eb:14:07:32:e3:20:bc:
ed:d0:fa:26:de:41:10:16:77:1f:5f:74:75:e8:8c:db:ed:62:
3e:6b:a6:57:82:44:a1:d6:f7:ab:6f:4a:4e:1f:29:6f:a7:8b:
00:6d:e4:bc:95:6f:a6:cc:f7:c6:ed:ba:da:5d:10:26:96:cd:
a9:ab:30:66:ea:72:0f:db:89:7c:87:f2:8f:26:c4:3b:02:cb:
05:4b:ed:c4
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAYzHJ3Hdjf7dkXeTZPqXciDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQxMDYzYjJkNTdlNGVmYWVmNjgyNGY2MjNkNDY1YTFjMzdiODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGM4ysGya9wkUT45fRAZeAunhJHS
McdKMjbaN8n7I64TcaCMEVMsRuWK3mMK1/5GHvlqxqjUrSkYZIYjznAhsWgUi8hw
XoguN/4YlAhqzPtNSvOdfDmPORZjWtg9WR6HcmiCH6EGzYwGMYcyksNdpVs0YNxK
ogw4nkxm3BMqXUQeAGhnqxzTUl/4q5J8x5f5zMIO12gC9noBh1YqpDirNVBxfXug
q7hn5x9kSZgo7NildPu70//zU0TMb3yVRavxaSNI5AuOEm1GiBF4IbUUTLqhNDEq
2bFOkySMxYyBpyIsV6c94o5yOOyXQE2Ob8rf0IsFdjPA7mm1w5GOXV9RXQIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFAJBBjstV+TvrvaCT2I9RlocN7hDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2MyNjVi
YS1iMDBhLTQxYWUtOTVkZC1jYjA3NWUyMzlhNTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvYzI2NWJh
LWIwMGEtNDFhZS05NWRkLWNiMDc1ZTIzOWE1Ni8xL0FrRUdPeTFYNU8tdTlvSlBZ
ajFHV2h3M3VFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF
BwEHAQH/BC0wKzAaBAIAATAUAwQCue7MMAwDBAPCD3gDBADCD3wwDQQCAAIwBwMF
AyoUXgAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAwSoAgMDKTQwDQYJKoZIhvcN
AQELBQADggEBAI0ScOZNvHftAGMZi7iNcIlT2vYSxr3WqCBFvYOOfcJBpklqA/y5
0BHs7ncFgsWnp4qYbMz+qpBrdEKuBgpiivv/Cz7rt/Dh6fLWPemTuz8P+DYHB8Pq
08vqkwv+c2jadYBTtD0zHNGIsv3ADcsAz45uHkvUY7vy44NzvwrN3cocAhR2lEXW
leV4ue/72EDjSDF7jFW5OxR2SQQ3IHaUMKHJMzZ/nRYOv1A+TA026xQHMuMgvO3Q
+ibeQRAWdx9fdHXojNvtYj5rpleCRKHW96tvSk4fKW+niwBt5LyVb6bM98btutpd
ECaWzamrMGbqcg/biXyH8o8mxDsCywVL7cQ=
-----END CERTIFICATE-----
Generated at Tue Apr 23 19:39:27 2024 by rpki-client on console-ams.rpki-client.org