Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
File: akq-io-jeJUa-mhZc1u-axgUi1c.cer (raw, json)
Hash identifier: z5cyoVzYTqH/uM0dy1G59FUkDh8/xCMGvD4I4kAIpGc=
Subject key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80159FBED2E3772C038E0CDD3D3FC3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203367
IP: 185.137.84.0/22
IP: 2a07:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:59:fb:ed:2e:37:72:c0:38:e0:cd:d3:d3:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:5d:72:20:25:cd:df:ed:1b:03:44:d6:81:
bf:18:f3:13:f4:21:b9:83:09:0e:52:87:c1:7c:bf:
a4:93:74:4a:b5:69:bf:59:c7:ec:7d:e3:70:75:f5:
37:39:25:99:ad:0c:af:eb:87:55:10:e6:1f:62:50:
28:ba:64:b6:38:cf:b0:19:c0:df:13:0d:42:b2:e7:
2d:04:1f:9c:88:35:50:84:6c:79:0b:6b:99:63:1d:
fa:cd:ed:36:dc:c5:37:40:83:7b:50:37:23:b8:a0:
0c:eb:82:ce:a2:8a:c5:46:1b:35:74:ea:0e:ca:76:
f2:a8:be:39:08:58:e3:fe:a7:bd:74:22:bf:ca:d4:
42:2f:1f:74:33:b8:99:ee:c9:58:35:a6:8e:f3:b4:
80:c7:40:10:37:d1:dc:5f:13:44:c2:2a:61:62:a8:
52:c8:b0:f6:f9:73:ad:1a:15:9a:56:ce:ef:d8:98:
45:48:9d:14:9a:6f:38:7e:b8:5f:99:34:fe:11:59:
d5:e9:eb:15:e8:ad:df:b9:94:86:32:44:f6:0e:94:
f5:94:a0:e2:61:43:2f:d2:a7:d8:ef:4c:27:d5:ff:
02:5c:4d:e7:04:b7:eb:34:16:72:27:6d:e7:4f:88:
5a:78:eb:d4:ff:77:17:78:0d:3a:ca:30:c4:d8:8e:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.84.0/22
IPv6:
2a07:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203367
Signature Algorithm: sha256WithRSAEncryption
3a:a3:f8:53:ad:83:24:87:2a:fd:fd:60:40:89:52:fe:48:53:
88:9a:62:f7:8d:5a:e1:63:9f:80:64:47:5e:29:be:e9:23:3f:
a4:e2:7a:7c:3c:51:ef:09:12:b9:97:63:9d:17:97:b6:5d:2f:
14:5d:4e:fd:33:95:02:6e:32:50:82:47:99:19:57:2f:ac:3d:
f8:7d:9f:14:50:96:7d:4d:96:d7:92:aa:04:5e:be:8a:ca:42:
da:23:f1:75:e1:8b:d5:f7:a6:a8:4c:a7:99:7f:4e:c3:f9:c8:
7b:ce:39:ef:74:0d:13:f6:4f:9e:c8:38:67:e9:cc:70:fb:db:
a6:3b:9c:3f:41:84:60:89:04:84:b8:17:da:c5:b9:6a:e1:cd:
75:31:56:04:e9:47:47:e4:6a:ca:d0:c1:82:01:64:db:38:28:
0e:97:52:fc:b5:84:da:10:f1:ac:41:70:7c:f7:6d:9b:5d:32:
f9:3b:a7:68:28:cb:87:17:73:37:d2:3f:00:49:21:ed:d6:36:
97:65:7f:5a:46:e8:26:9b:4f:dc:84:3f:f0:bd:e2:31:7a:f7:
ba:36:50:97:82:c3:69:03:a3:95:9d:79:6e:a7:4e:50:a1:77:
58:4a:6f:31:3d:4a:bf:14:f6:77:94:ab:87:07:54:ec:bd:0e:
73:91:9a:db
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAVn77S43csA44M3T0/w7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRhYmU4YThmYTM3ODk1MWFmYTY4NTk3MzViYmU2YjE4MTQ4YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzNdciAlzd/tGwNE1oG/GPMT9CG5
gwkOUofBfL+kk3RKtWm/WcfsfeNwdfU3OSWZrQyv64dVEOYfYlAoumS2OM+wGcDf
Ew1CsuctBB+ciDVQhGx5C2uZYx36ze023MU3QIN7UDcjuKAM64LOoorFRhs1dOoO
ynbyqL45CFjj/qe9dCK/ytRCLx90M7iZ7slYNaaO87SAx0AQN9HcXxNEwiphYqhS
yLD2+XOtGhWaVs7v2JhFSJ0Umm84frhfmTT+EVnV6esV6K3fuZSGMkT2DpT1lKDi
YUMv0qfY70wn1f8CXE3nBLfrNBZyJ23nT4haeOvU/3cXeA06yjDE2I62qwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGpKvoqPo3iVGvpoWXNbvmsYFItXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2IwMjhi
Ni00NzgyLTRjN2YtYjZhMi04N2ViNDQ4ZTkyZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYjAyOGI2
LTQ3ODItNGM3Zi1iNmEyLTg3ZWI0NDhlOTJlZC8xL2FrcS1pby1qZUpVYS1taFpj
MXUtYXhnVWkxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYlUMA0EAgACMAcDBQMqBwLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaZzANBgkqhkiG9w0BAQsFAAOCAQEAOqP4U62DJIcq
/f1gQIlS/khTiJpi941a4WOfgGRHXim+6SM/pOJ6fDxR7wkSuZdjnReXtl0vFF1O
/TOVAm4yUIJHmRlXL6w9+H2fFFCWfU2W15KqBF6+ispC2iPxdeGL1femqEynmX9O
w/nIe84573QNE/ZPnsg4Z+nMcPvbpjucP0GEYIkEhLgX2sW5auHNdTFWBOlHR+Rq
ytDBggFk2zgoDpdS/LWE2hDxrEFwfPdtm10y+TunaCjLhxdzN9I/AEkh7dY2l2V/
WkboJptP3IQ/8L3iMXr3ujZQl4LDaQOjlZ15bqdOUKF3WEpvMT1KvxT2d5SrhwdU
7L0Oc5Ga2w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:07 2024 by rpki-client on console-ams.rpki-client.org