Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
File: soH_MU_IquOXVAewoMF_L9403CY.cer (raw, json)
Hash identifier: z3dMD3pZVp/X8FdKT/m+iMrepyZI/E9keYHZPw9lrpo=
Subject key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726D392B4195A4577D4F94A562E3472
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8271
IP: 45.66.172.0/22
IP: 62.48.0.0/19
IP: 185.237.108.0 -- 185.237.123.255
IP: 2001:4bf8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d3:92:b4:19:5a:45:77:d4:f9:4a:56:2e:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:4b:8f:c4:9c:81:b8:9a:4d:ce:a7:ce:ed:
51:07:66:be:e9:bc:3c:81:0d:22:97:f5:5e:2e:2d:
a7:ef:e4:1b:c7:29:e0:d0:40:f3:b0:2b:c5:56:43:
7d:4a:03:43:3e:70:69:05:64:8d:09:ba:09:e8:25:
35:a1:1d:59:c8:77:8d:5d:66:71:56:f0:c5:0d:30:
2c:90:97:de:8e:89:de:cf:de:af:b8:a0:ab:61:4a:
9e:3a:ce:5e:5a:b8:4d:72:42:75:85:ba:30:5a:07:
2e:70:9e:8c:26:ed:a3:3e:3a:89:84:f1:e8:1d:8d:
e4:49:1d:0b:81:59:2b:b6:59:e6:0d:5a:57:28:b6:
12:4b:5a:8a:e9:e3:92:f1:69:17:3b:b3:90:62:df:
e3:70:29:77:c8:80:3f:c8:5d:ca:24:28:81:f0:f1:
27:f0:6d:6d:91:59:73:5f:94:f4:b5:e2:3b:e6:5a:
ff:05:24:e8:ca:5e:92:74:78:f1:57:02:a4:ee:cf:
fa:18:aa:d0:96:07:f8:f0:4a:6b:5d:ad:f5:20:95:
ad:d9:8b:54:c7:1a:af:fa:96:a4:ce:56:5c:b6:38:
e3:2b:13:df:ad:d3:58:46:aa:f9:df:0a:e1:ca:65:
b4:c1:2b:9f:10:89:37:1c:bd:b3:c3:fc:c8:25:a8:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.172.0/22
62.48.0.0/19
185.237.108.0-185.237.123.255
IPv6:
2001:4bf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8271
Signature Algorithm: sha256WithRSAEncryption
63:ce:14:dd:52:cb:cf:b4:95:f9:54:9c:2a:d6:b0:4e:13:35:
a0:4a:4b:4e:13:78:89:c4:c3:8c:e9:73:e9:12:d9:dc:0f:9c:
b7:9d:cb:16:9e:d5:d8:2f:aa:b4:9d:b3:d4:7f:b2:a0:b4:a3:
60:10:84:d3:b2:5e:61:40:2c:14:db:04:29:a6:0f:e8:98:18:
10:f7:7c:2a:52:c6:3c:e0:0e:1d:13:27:04:2a:e9:e7:b9:f0:
69:45:67:f2:76:ca:13:1c:54:ed:03:5a:a6:7a:24:2e:5a:d6:
2a:58:e0:26:ac:8a:9b:63:12:c0:dd:a9:d9:18:c6:43:19:a2:
86:b2:87:01:ac:c3:4d:2c:26:17:5f:06:ac:35:70:6e:eb:31:
8d:38:72:f1:76:d1:fd:7d:00:d2:63:97:ea:71:04:ad:d7:e6:
6d:9b:09:a7:4d:fe:13:f8:29:2c:13:5b:29:6e:07:73:2b:73:
2a:e4:e7:13:31:d1:eb:cd:e6:96:48:c1:54:14:02:d3:97:55:
fa:ee:a8:b7:59:c3:aa:92:fc:69:b5:e4:f9:11:ad:bf:7f:c6:
92:26:b6:86:e1:4f:c3:7b:a9:d7:3c:78:be:b3:44:11:c9:ac:
a6:66:1b:8a:7e:65:06:21:0a:7c:38:2a:02:8d:44:8c:35:81:
10:2b:71:d5
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAYzHJtOStBlaRXfU+UpWLjRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjgxZmYzMTRmYzhhYWUzOTc1NDA3YjBhMGMxN2YyZmRlMzRkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtANLj8ScgbiaTc6nzu1RB2a+6bw8
gQ0il/VeLi2n7+Qbxyng0EDzsCvFVkN9SgNDPnBpBWSNCboJ6CU1oR1ZyHeNXWZx
VvDFDTAskJfejonez96vuKCrYUqeOs5eWrhNckJ1hbowWgcucJ6MJu2jPjqJhPHo
HY3kSR0LgVkrtlnmDVpXKLYSS1qK6eOS8WkXO7OQYt/jcCl3yIA/yF3KJCiB8PEn
8G1tkVlzX5T0teI75lr/BSToyl6SdHjxVwKk7s/6GKrQlgf48EprXa31IJWt2YtU
xxqv+pakzlZctjjjKxPfrdNYRqr53wrhymW0wSufEIk3HL2zw/zIJaj/9wIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFLKB/zFPyKrjl1QHsKDBfy/eNNwmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2Q3MzU5
Mi1lNDZkLTQ1OTgtOGIxMi1mYTkxMTRhODJhYzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZDczNTky
LWU0NmQtNDU5OC04YjEyLWZhOTExNGE4MmFjOS8xL3NvSF9NVV9JcXVPWFZBZXdv
TUZfTDk0MDNDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaAwQCLUKsAwQFPjAAMAwDBAK57WwDBAK57XgwDQQC
AAIwBwMFACABS/gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICIE8wDQYJKoZIhvcN
AQELBQADggEBAGPOFN1Sy8+0lflUnCrWsE4TNaBKS04TeInEw4zpc+kS2dwPnLed
yxae1dgvqrSds9R/sqC0o2AQhNOyXmFALBTbBCmmD+iYGBD3fCpSxjzgDh0TJwQq
6ee58GlFZ/J2yhMcVO0DWqZ6JC5a1ipY4CasiptjEsDdqdkYxkMZooayhwGsw00s
JhdfBqw1cG7rMY04cvF20f19ANJjl+pxBK3X5m2bCadN/hP4KSwTWyluB3Mrcyrk
5xMx0evN5pZIwVQUAtOXVfruqLdZw6qS/Gm15PkRrb9/xpImtobhT8N7qdc8eL6z
RBHJrKZmG4p+ZQYhCnw4KgKNRIw1gRArcdU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:22:52 2024 by rpki-client on console-fra.rpki-client.org