Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
File: sof_KnM-M76vU0lKkO7BUrvHWLw.cer (raw, json)
Hash identifier: LzpqTh7/+EVMbEUzKn0mNX51Rj5A/nEO5RHUmI6N8c8=
Subject key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBDACFBED2F3526359F2C7EAB1F38B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60422
IP: 45.95.208.0/24
IP: 185.31.76.0/22
IP: 188.116.39.0/24
IP: 213.142.140.0/23
IP: 2a00:b920::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:da:cf:be:d2:f3:52:63:59:f2:c7:ea:b1:f3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:49:86:a1:29:a3:0b:b5:b3:9c:77:b1:51:
fd:22:ea:a9:f7:5e:33:df:31:b1:24:12:6f:7d:09:
a2:2e:b8:9f:fd:66:72:2a:d6:b9:ec:8b:92:9e:cc:
d7:cd:9b:12:6f:f3:d2:18:fe:dc:7d:78:8f:29:b7:
9b:51:58:08:5c:3e:32:ef:8e:49:4b:42:cc:2b:c0:
7e:58:b8:9b:15:f1:4a:42:24:9b:dc:3e:7f:f0:a5:
75:f6:ad:98:e9:ce:aa:92:9e:85:77:8b:dc:7c:8f:
dc:2b:9b:3f:91:cd:08:0d:66:86:8e:54:8a:84:aa:
ed:3c:ad:3b:ad:58:72:c6:97:3b:25:26:87:10:ec:
9b:cc:67:74:56:c5:6c:07:52:6a:d7:9b:47:a8:0f:
31:5b:76:39:71:22:b9:18:1a:21:0f:a5:a0:28:8c:
3f:83:49:d3:ac:7e:79:08:c0:50:ea:0d:8f:a3:b3:
60:09:5a:1b:af:c1:d7:5d:f8:d5:6e:74:5d:41:d3:
43:f6:88:2d:cf:cb:39:6f:82:77:9f:b2:77:97:b0:
bf:47:97:5d:d1:0a:2b:58:ed:f8:4d:7a:3c:29:68:
89:5a:c9:3e:da:bf:34:1e:ee:b3:f3:75:bf:31:88:
f5:4d:32:e9:bf:05:d9:73:38:bc:64:0f:3d:62:43:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
185.31.76.0/22
188.116.39.0/24
213.142.140.0/23
IPv6:
2a00:b920::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60422
Signature Algorithm: sha256WithRSAEncryption
3a:cb:95:01:8a:f0:94:cf:7b:d5:5c:6b:10:6e:d3:fe:11:7c:
22:ee:e6:98:a6:1f:84:d5:8f:88:8b:de:d0:d1:92:8d:54:00:
f8:8b:97:f7:4e:e3:f3:4f:70:21:63:7a:c3:43:0f:4e:29:a0:
62:d4:fd:2b:d1:6b:a7:3a:e9:7f:d8:b3:b1:68:5a:b2:f5:0b:
c6:59:03:14:fb:a8:f0:ad:3a:42:3b:6e:a1:7c:83:38:5c:70:
01:00:e5:5b:58:3e:6d:b4:01:0a:01:83:f9:fe:c8:17:10:3a:
6b:58:b8:16:5e:5d:5f:6b:06:a4:a2:ec:85:bb:b2:c6:e1:21:
1b:fc:4a:90:be:e4:ff:43:d6:19:2b:2c:48:91:76:b3:bd:f9:
f5:f4:4a:ae:60:b4:3e:37:95:07:e6:98:81:0c:c5:16:72:ac:
6d:b0:7b:b5:1e:03:48:f3:8e:42:d5:3f:af:f0:41:1e:92:82:
83:46:e7:6e:4d:73:ba:b3:21:f3:26:55:dd:e6:4d:61:51:87:
b8:51:8a:fb:09:2c:dc:00:5f:ee:69:89:d2:2c:83:3b:97:a4:
0a:90:c8:12:ac:eb:d7:cf:d4:3d:0d:7f:7a:7c:33:2e:8f:91:
b5:b0:fa:bf:0e:3a:15:03:24:f9:4f:e1:43:b0:66:5e:b9:99:
41:b2:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:22:52 2024 by rpki-client on console-fra.rpki-client.org