Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
File: so7x9PiCePTfGec-M4HOzXjgacE.cer (raw, json)
Hash identifier: Sx9xMB3M+h//uYB3xQ6DItlebjBDQ5Upcd7ZCwBdlD4=
Subject key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01932ADB12ED7292E42B686A7587DAF7F31F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Nov 2024 13:27:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214165
IP: 83.175.143.0/24
IP: 2001:67c:260::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:db:12:ed:72:92:e4:2b:68:6a:75:87:da:f7:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 14 13:27:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:d1:23:aa:0a:9d:52:9a:8f:a8:84:45:64:
23:55:d5:8b:08:34:84:75:1b:58:1b:56:c3:96:aa:
b4:4f:ee:e1:d0:43:fe:1f:32:2b:03:4e:33:00:b0:
74:92:7c:04:9d:17:22:90:ca:0e:1d:d2:3a:3b:30:
fe:69:8d:ba:8c:98:dd:a9:a2:58:46:96:45:65:2b:
48:15:60:71:ef:60:84:83:d0:3a:49:bd:84:58:bb:
f7:79:ae:2f:01:89:f1:a5:97:c2:8a:50:31:d6:7a:
86:ad:e1:7b:86:27:db:38:90:5e:68:ce:93:fc:90:
da:f5:79:c8:b8:65:f4:09:fb:3d:af:16:68:97:3c:
34:8b:a4:8c:bb:67:ef:db:15:81:51:7f:33:22:fb:
3c:2a:89:75:52:86:ac:3c:03:38:08:c8:b9:45:27:
12:be:a9:52:a4:d1:90:06:06:61:07:5c:aa:c9:95:
e2:dc:72:fe:71:a8:b4:2e:f6:9c:d9:a9:9c:65:0e:
2c:17:86:38:af:5a:92:23:f7:65:6b:87:1c:a0:ed:
22:a3:61:bd:94:03:85:aa:f2:94:2d:4c:4c:6b:61:
d7:03:67:c7:ee:0c:8c:1e:1f:a1:5c:b3:ab:52:31:
32:ca:90:91:a1:a8:e7:f7:13:61:ed:7c:6d:bf:81:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.143.0/24
IPv6:
2001:67c:260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214165
Signature Algorithm: sha256WithRSAEncryption
6c:fe:f5:ef:c6:e7:3e:ff:6d:c7:cf:f5:15:f6:34:e0:10:f7:
70:21:2d:50:9d:69:44:b2:52:2f:e0:12:99:17:11:ce:b4:2f:
95:3b:be:fa:a5:97:98:23:79:04:b1:55:91:de:90:a4:09:c9:
04:b9:5c:e4:82:be:87:55:41:7b:cf:23:a4:ef:a0:7d:c9:26:
e4:bb:f7:3e:a6:1f:3c:45:54:01:98:6a:fb:c7:ac:2f:bc:72:
ee:aa:bd:80:39:22:11:a6:df:0c:2a:69:6c:2f:27:d5:a8:6a:
95:14:f6:65:4e:f7:aa:e9:bd:5d:ce:18:68:f9:15:78:d4:88:
99:d6:fe:da:0c:cf:fe:38:93:6b:65:e6:7c:dc:52:9d:5a:2d:
ba:a9:c1:2c:59:01:4c:48:b0:76:23:0b:8d:61:ef:3f:0a:13:
fb:a1:7f:e9:9e:1c:0f:af:cd:b8:b1:ec:9f:13:30:de:f3:99:
16:4f:47:29:74:f1:52:27:61:31:ea:05:e5:39:ef:e3:c9:f7:
1e:cc:4f:c8:73:46:26:16:50:53:91:e5:1e:d2:d3:ef:5e:8c:
b4:c4:b3:9e:54:33:28:fd:1c:4f:f5:da:7c:17:eb:d2:01:10:
8d:93:70:29:8a:a0:62:8e:9f:8c:89:f9:81:99:96:93:52:4c:
9b:ba:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:22:52 2024 by rpki-client on console-fra.rpki-client.org