Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
File: alf_6CKzunvBlNt6c0yF787y8oM.cer (raw, json)
Hash identifier: LQakWBYPdRNsB9l/NfAbuhJjrRgydLY0j+W01ETseEk=
Subject key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC008596D77E7CFF90DFD4AB300252
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20701
AS: 25192
AS: 200070
IP: 5.187.34.0/24
IP: 185.43.132.0/22
IP: 193.17.47.0/24
IP: 193.29.206.0/24
IP: 194.0.12.0 -- 194.0.14.255
IP: 212.237.229.0/24
IP: 217.31.192.0/20
IP: 2001:678:1::/48
IP: 2001:678:f:: -- 2001:678:11:ffff:ffff:ffff:ffff:ffff
IP: 2001:1488::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:00:85:96:d7:7e:7c:ff:90:df:d4:ab:30:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:bc:47:dc:83:5c:aa:bf:a1:2d:d8:70:61:
16:04:ce:24:95:bb:7b:91:17:c5:74:f8:d4:a0:1a:
b1:aa:f4:0c:20:8c:9a:26:95:ea:ec:44:56:2a:9c:
b5:b3:9c:6e:fb:90:0f:6c:4d:c4:7c:93:88:0c:48:
23:b1:e2:34:75:7c:39:a2:d9:fa:61:92:66:7e:1a:
3c:58:67:05:7a:54:98:39:94:38:37:b0:e0:9e:a5:
53:d6:14:dd:a1:14:43:be:16:be:27:3c:d7:48:6d:
ba:a0:3e:f0:d6:cc:4b:b1:41:85:ca:76:93:f4:0b:
9b:31:77:64:88:2d:76:b3:67:c5:09:ae:ba:7f:e4:
0c:e0:5e:80:c5:77:6a:48:98:5f:00:41:32:07:d8:
f9:bb:4e:be:00:a5:5b:8d:66:ae:8e:dd:06:96:3b:
25:a8:e6:d7:23:bb:22:93:46:df:6c:3b:1a:30:51:
98:ea:01:ec:10:f0:86:51:b7:91:28:d9:aa:5e:4d:
56:3e:88:a7:ac:b9:26:02:45:12:b2:60:03:78:4d:
41:b8:d6:cf:9b:89:c3:d6:ea:b9:a3:2b:40:72:57:
1d:e5:52:ff:6f:2e:f2:5a:ea:ff:d2:f6:1b:23:12:
04:75:1d:e4:1f:3a:9f:e4:7a:fa:20:a3:3d:f7:a5:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.34.0/24
185.43.132.0/22
193.17.47.0/24
193.29.206.0/24
194.0.12.0-194.0.14.255
212.237.229.0/24
217.31.192.0/20
IPv6:
2001:678:1::/48
2001:678:f::-2001:678:11:ffff:ffff:ffff:ffff:ffff
2001:1488::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20701
25192
200070
Signature Algorithm: sha256WithRSAEncryption
08:fa:78:8c:3a:67:97:64:dc:9c:a4:f1:fc:5f:51:d5:d6:6e:
72:81:4c:f0:e7:97:53:1a:7b:76:96:37:5e:b1:87:3c:e2:d5:
9f:a1:c1:5d:59:4f:79:84:f5:99:3e:84:bc:3e:3b:23:d5:f2:
8e:c3:d6:be:57:3d:ae:89:b3:08:9c:c3:bf:c1:6e:07:03:a1:
51:6b:e9:2a:4c:19:74:23:4b:35:d2:7b:eb:3f:0c:0b:f3:a3:
b9:ba:78:bd:21:3a:2b:17:6d:3f:9c:50:70:a9:8f:cb:73:0d:
db:1a:74:e2:42:0b:bc:c3:5c:12:0f:6a:9e:f2:8a:dc:fe:40:
61:87:ea:39:7a:f7:3c:7e:7f:ff:e4:d8:d1:46:f2:70:d5:a0:
5e:67:58:1a:3f:c0:8f:52:3f:3b:be:a6:ec:09:5f:75:71:7c:
c0:a9:2f:a2:64:bf:4a:20:eb:fb:21:18:15:25:e3:e0:d3:bc:
be:ae:4e:63:29:2b:34:25:87:b2:11:d5:6e:11:7a:36:0d:de:
99:1e:97:2c:20:5f:73:01:1c:90:9c:5d:87:a4:19:65:90:17:
1b:7b:28:0b:2c:c9:10:7d:7b:dd:e9:91:63:03:ff:e0:96:71:
50:7d:f8:b3:24:b6:3b:55:38:b2:16:e9:72:53:8f:25:b5:bf:
3d:9c:b5:10
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISAYzF3ACFltd+fP+Q39SrMAJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTU3ZmZlODIyYjNiYTdiYzE5NGRiN2E3MzRjODVlZmNlZjJmMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgu8R9yDXKq/oS3YcGEWBM4klbt7
kRfFdPjUoBqxqvQMIIyaJpXq7ERWKpy1s5xu+5APbE3EfJOIDEgjseI0dXw5otn6
YZJmfho8WGcFelSYOZQ4N7DgnqVT1hTdoRRDvha+JzzXSG26oD7w1sxLsUGFynaT
9AubMXdkiC12s2fFCa66f+QM4F6AxXdqSJhfAEEyB9j5u06+AKVbjWaujt0Gljsl
qObXI7sik0bfbDsaMFGY6gHsEPCGUbeRKNmqXk1WPoinrLkmAkUSsmADeE1BuNbP
m4nD1uq5oytAclcd5VL/by7yWur/0vYbIxIEdR3kHzqf5Hr6IKM996VAtQIDAQAB
o4IDADCCAvwwHQYDVR0OBBYEFGpX/+gis7p7wZTbenNMhe/O8vKDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2FmZWYx
Mi0xZjA4LTRiNDYtOTQ3Yi1jYTBjNjI2MjEwOTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYWZlZjEy
LTFmMDgtNGI0Ni05NDdiLWNhMGM2MjYyMTA5OC8xL2FsZl82Q0t6dW52QmxOdDZj
MHlGNzg3eThvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF
BwEHAQH/BGgwZjA4BAIAATAyAwQABbsiAwQCuSuEAwQAwREvAwQAwR3OMAwDBALC
AAwDBADCAA4DBADU7eUDBATZH8AwKgQCAAIwJAMHACABBngAATASAwcAIAEGeAAP
AwcBIAEGeAAQAwUDIAEUiDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgJQ3QICYmgC
AwMNhjANBgkqhkiG9w0BAQsFAAOCAQEACPp4jDpnl2TcnKTx/F9R1dZucoFM8OeX
Uxp7dpY3XrGHPOLVn6HBXVlPeYT1mT6EvD47I9XyjsPWvlc9romzCJzDv8FuBwOh
UWvpKkwZdCNLNdJ76z8MC/Ojubp4vSE6KxdtP5xQcKmPy3MN2xp04kILvMNcEg9q
nvKK3P5AYYfqOXr3PH5//+TY0UbycNWgXmdYGj/Aj1I/O76m7AlfdXF8wKkvomS/
SiDr+yEYFSXj4NO8vq5OYykrNCWHshHVbhF6Ng3emR6XLCBfcwEckJxdh6QZZZAX
G3soCyzJEH173emRYwP/4JZxUH34syS2O1U4shbpclOPJbW/PZy1EA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:18 2024 by rpki-client on console-ams.rpki-client.org