Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
File: RU-dLb7ZdFOEBaefbsfobErt09E.cer (raw, json)
Hash identifier: YSXcmyJoftRfEPjC3H5qXYfpPycyKptjiDJWxR8GN7I=
Subject key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191277487CC3789E3066A6A1D99D75EDBC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Aug 2024 11:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.118.37.0/24
IP: 185.68.80.0/22
IP: 193.238.192.0/22
IP: 195.234.91.0/24
IP: 2a0d:9980::/29
IP: 2a0f:5140::/29
IP: 2a0f:5940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:74:87:cc:37:89:e3:06:6a:6a:1d:99:d7:5e:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 11:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8f:18:fe:23:9c:14:66:a9:05:23:7f:7a:
43:98:32:d8:72:86:a0:38:01:0f:69:19:e1:dd:18:
8b:7c:3b:ca:a6:55:5f:86:ea:a7:b6:f6:24:d8:03:
8d:ea:8e:49:6b:d2:e3:8a:00:84:94:f6:aa:20:83:
3e:4c:7b:e3:6b:ad:d0:47:6c:81:e1:14:25:38:48:
c6:46:28:cc:8e:04:54:11:02:4c:52:9f:27:bd:8c:
0e:58:b6:a1:e4:cd:9e:e5:c8:ed:db:47:97:1f:2d:
2f:4f:5c:4c:a3:fc:fa:39:2e:3d:50:99:86:8e:d3:
e8:1d:bb:67:df:fd:18:fc:86:e4:61:c8:a6:dc:20:
de:12:04:c6:9f:db:14:a1:9b:37:a8:bf:67:10:4e:
16:f1:5d:19:02:73:37:94:a6:fb:65:88:7a:05:52:
5a:e6:c9:a2:34:bc:67:68:43:a8:7c:a8:3d:19:fc:
b8:67:cc:aa:21:1a:c4:ec:28:8d:11:2d:b7:c4:30:
fe:1d:2c:23:0d:5d:e2:70:e2:bb:ea:3b:c8:1f:18:
c0:27:70:f5:52:72:b7:2d:9d:55:69:b4:1b:96:1d:
30:85:d1:5b:46:d3:59:69:c3:32:85:fc:d1:53:bb:
c4:c2:9c:a0:98:1c:66:c1:5e:7c:a4:cd:98:c3:6d:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.37.0/24
185.68.80.0/22
193.238.192.0/22
195.234.91.0/24
IPv6:
2a0d:9980::/29
2a0f:5140::/29
2a0f:5940::/29
Signature Algorithm: sha256WithRSAEncryption
50:b3:1e:dc:65:d9:69:f5:ec:8b:fa:55:de:8c:24:1e:1c:75:
a0:9b:91:41:45:ca:8c:37:55:19:57:13:83:c4:0e:3a:5c:bb:
7a:d8:eb:92:f2:62:de:c9:13:76:3b:d3:df:23:b4:56:a6:e9:
77:7e:46:47:69:cd:46:3a:b6:18:8d:57:7e:9e:24:43:fb:f6:
96:d2:56:7f:2b:43:fc:05:9c:27:53:aa:62:f3:64:e4:01:fe:
f5:13:70:9a:2a:e5:eb:dd:18:32:3b:10:e8:35:c3:30:95:73:
53:53:a9:3e:aa:ab:e6:6d:86:7f:21:24:12:fd:be:b1:f6:33:
b6:b8:77:b0:72:b7:9e:18:d9:6f:61:78:94:93:aa:f0:e2:b1:
aa:5e:9e:e5:5a:7d:59:9a:de:d9:0f:8a:86:b4:b8:6b:2e:8f:
94:0c:15:76:f7:1a:fb:37:fa:ec:03:6c:6c:b0:b7:a0:08:f4:
80:82:ee:19:b4:85:5b:29:11:cb:a0:bb:88:b7:d0:04:a9:a5:
25:09:b3:dd:99:80:f5:57:69:ae:93:bf:88:4f:fa:f8:d0:d9:
ee:67:92:55:4d:e2:bb:fe:5f:9a:20:97:30:1d:2c:51:e0:19:
1b:9e:56:fa:10:f8:ac:45:64:1f:0e:de:9c:ba:d3:ad:e4:1a:
8e:ae:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:34:51 2024 by rpki-client on console-fra.rpki-client.org