Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
File: RU-dLb7ZdFOEBaefbsfobErt09E.cer (raw, json)
Hash identifier: wgkgBnT0Lh8lH/Zkeg00w6HeKUwcOuGLBLMr0tbyBY0=
Subject key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AB8106AEBE53359E1ED35895FAAC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.68.80.0/22
IP: 193.238.192.0/22
IP: 195.234.91.0/24
IP: 2a0d:9980::/29
IP: 2a0f:5140::/29
IP: 2a0f:5940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b8:10:6a:eb:e5:33:59:e1:ed:35:89:5f:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8f:18:fe:23:9c:14:66:a9:05:23:7f:7a:
43:98:32:d8:72:86:a0:38:01:0f:69:19:e1:dd:18:
8b:7c:3b:ca:a6:55:5f:86:ea:a7:b6:f6:24:d8:03:
8d:ea:8e:49:6b:d2:e3:8a:00:84:94:f6:aa:20:83:
3e:4c:7b:e3:6b:ad:d0:47:6c:81:e1:14:25:38:48:
c6:46:28:cc:8e:04:54:11:02:4c:52:9f:27:bd:8c:
0e:58:b6:a1:e4:cd:9e:e5:c8:ed:db:47:97:1f:2d:
2f:4f:5c:4c:a3:fc:fa:39:2e:3d:50:99:86:8e:d3:
e8:1d:bb:67:df:fd:18:fc:86:e4:61:c8:a6:dc:20:
de:12:04:c6:9f:db:14:a1:9b:37:a8:bf:67:10:4e:
16:f1:5d:19:02:73:37:94:a6:fb:65:88:7a:05:52:
5a:e6:c9:a2:34:bc:67:68:43:a8:7c:a8:3d:19:fc:
b8:67:cc:aa:21:1a:c4:ec:28:8d:11:2d:b7:c4:30:
fe:1d:2c:23:0d:5d:e2:70:e2:bb:ea:3b:c8:1f:18:
c0:27:70:f5:52:72:b7:2d:9d:55:69:b4:1b:96:1d:
30:85:d1:5b:46:d3:59:69:c3:32:85:fc:d1:53:bb:
c4:c2:9c:a0:98:1c:66:c1:5e:7c:a4:cd:98:c3:6d:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.80.0/22
193.238.192.0/22
195.234.91.0/24
IPv6:
2a0d:9980::/29
2a0f:5140::/29
2a0f:5940::/29
Signature Algorithm: sha256WithRSAEncryption
8b:40:ce:17:68:fb:87:20:8e:54:a9:a2:eb:39:67:89:e0:2d:
1f:47:46:9f:80:fa:f7:ba:c9:2c:1a:2b:26:f6:5c:a6:c4:11:
0d:c1:48:56:b4:92:43:69:b2:be:9e:00:05:ff:70:01:68:1a:
53:d2:6a:7d:6b:92:b5:3d:fd:c5:b2:0f:47:17:89:37:83:cc:
98:c8:c9:24:85:aa:a1:65:61:c6:5c:91:20:52:0c:8d:47:f4:
5c:28:4e:7c:48:0c:73:01:09:b1:d5:e1:02:3c:3a:c0:64:ba:
e3:5d:fd:b2:60:fd:1b:2e:95:64:8e:58:0f:a0:d7:e5:67:9d:
13:cb:82:4b:f8:6f:7c:0e:bb:9d:cc:29:ab:65:7f:f5:5b:a3:
36:62:d0:86:43:e3:f1:02:1e:3d:03:99:46:6a:e4:50:d2:48:
99:24:7f:17:23:7e:64:2a:60:01:b9:e1:27:4f:c5:15:0e:b3:
85:4e:e5:31:35:01:ec:7f:a2:27:f3:76:c2:53:e5:b9:de:d5:
31:44:13:c5:2d:8b:3f:1a:8c:e2:b1:e2:b3:ea:a9:04:43:6b:
33:fb:e9:3b:fe:4b:26:4f:c7:64:0d:e8:71:20:4f:12:e0:9b:
93:58:e2:2c:43:7c:de:65:93:9c:18:6c:ac:9e:35:7a:8b:5e:
cf:13:35:44
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAYzKKrgQauvlM1nh7TWJX6rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTRmOWQyZGJlZDk3NDUzODQwNWE3OWY2ZWM3ZTg2YzRhZWRkM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQePGP4jnBRmqQUjf3pDmDLYcoag
OAEPaRnh3RiLfDvKplVfhuqntvYk2AON6o5Ja9LjigCElPaqIIM+THvja63QR2yB
4RQlOEjGRijMjgRUEQJMUp8nvYwOWLah5M2e5cjt20eXHy0vT1xMo/z6OS49UJmG
jtPoHbtn3/0Y/IbkYcim3CDeEgTGn9sUoZs3qL9nEE4W8V0ZAnM3lKb7ZYh6BVJa
5smiNLxnaEOofKg9Gfy4Z8yqIRrE7CiNES23xDD+HSwjDV3icOK76jvIHxjAJ3D1
UnK3LZ1VabQblh0whdFbRtNZacMyhfzRU7vEwpygmBxmwV58pM2Yw207AwIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFEVPnS2+2XRThAWnn27H6GxK7dPRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzNiYjFh
NS05NDFlLTRhNjEtOTQzZS1mYWFlNGJhZWJlZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvM2JiMWE1
LTk0MWUtNGE2MS05NDNlLWZhYWU0YmFlYmVmZi8xL1JVLWRMYjdaZEZPRUJhZWZi
c2ZvYkVydDA5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAYBAIAATASAwQCuURQAwQCwe7AAwQAw+pbMBsEAgACMBUDBQMq
DZmAAwUDKg9RQAMFAyoPWUAwDQYJKoZIhvcNAQELBQADggEBAItAzhdo+4cgjlSp
ous5Z4ngLR9HRp+A+ve6ySwaKyb2XKbEEQ3BSFa0kkNpsr6eAAX/cAFoGlPSan1r
krU9/cWyD0cXiTeDzJjIySSFqqFlYcZckSBSDI1H9FwoTnxIDHMBCbHV4QI8OsBk
uuNd/bJg/RsulWSOWA+g1+VnnRPLgkv4b3wOu53MKatlf/VbozZi0IZD4/ECHj0D
mUZq5FDSSJkkfxcjfmQqYAG54SdPxRUOs4VO5TE1Aex/oifzdsJT5bne1TFEE8Ut
iz8ajOKx4rPqqQRDazP76Tv+SyZPx2QN6HEgTxLgm5NY4ixDfN5lk5wYbKyeNXqL
Xs8TNUQ=
-----END CERTIFICATE-----
Generated at Fri May 3 09:07:04 2024 by rpki-client on console-ams.rpki-client.org