Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.cer (raw, json)
Hash identifier: Ra3ymcM4P3gSwEpP2q30lFHfF+QSt5As3mZd1XIwZM8=
Subject key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F3E0DA7E47522D9A6948F7096E209
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 139.6.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3e:0d:a7:e4:75:22:d9:a6:94:8f:70:96:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:64:d4:f3:fe:a1:4c:dc:d8:cc:f9:b4:10:
8a:e5:1c:eb:aa:57:74:76:43:5b:30:0a:81:f9:5c:
d3:c6:98:d3:3a:70:72:9b:44:e9:7c:35:a9:6f:0a:
b9:69:dc:90:ff:8f:e3:bc:fd:94:9f:20:6a:7e:03:
29:9a:93:8a:c7:70:84:57:b9:d5:00:fa:6f:31:19:
40:26:f3:c9:75:ff:8e:d1:af:7e:96:d9:35:05:9c:
91:62:0e:14:be:b7:b2:07:63:23:a5:36:04:28:0e:
65:03:80:f1:a1:06:67:46:80:3f:a9:15:c5:af:30:
56:aa:99:e5:37:dd:95:f6:fe:88:a1:19:c8:36:40:
a6:2d:41:45:2a:fe:a6:df:2f:d9:8b:d0:6a:7f:15:
cf:7a:a5:ce:51:97:0a:4c:d5:4a:ae:7e:fa:e1:dd:
d2:4a:53:20:b7:72:50:c0:5e:e4:02:29:b9:a1:2e:
3b:60:0a:7e:d3:fb:69:b5:f3:e4:a8:be:22:bf:8b:
93:5a:00:5c:8b:41:5e:43:31:7f:46:53:f8:3e:f5:
a1:a7:05:41:a4:99:e8:40:df:46:6f:85:f1:d8:f7:
b1:6f:1e:8b:4f:0a:8d:4e:f7:9c:23:ff:47:bf:f2:
5e:ab:78:53:b5:11:7b:3f:de:e1:3e:0b:56:6a:3a:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:9a:df:a0:cd:fe:4d:a8:af:87:dc:51:ed:9b:32:33:c1:f3:
93:2d:ae:24:6a:cc:bd:8b:7a:a3:9a:3f:91:ef:73:0f:5b:b9:
df:29:13:3e:34:f0:a0:9c:07:13:e4:de:f0:ab:22:9b:38:33:
db:28:8b:39:ba:6f:95:4b:3f:53:ab:ba:fa:06:9d:bb:e7:a2:
1f:e1:a7:af:94:4b:04:4b:16:5a:2e:c9:ba:58:97:3f:e3:76:
69:33:51:1a:13:ee:d6:2c:d3:f6:ba:78:5a:81:4f:57:b9:39:
87:19:e3:89:c2:dc:b9:e8:76:c9:c4:7e:25:31:d1:4b:4f:bc:
8c:db:f5:ef:58:67:76:49:91:fc:41:23:3a:f6:7f:1a:e2:c7:
42:47:26:5a:17:55:ed:28:32:18:be:45:f0:10:8a:af:cf:65:
10:12:53:12:bd:da:44:9a:fb:66:79:fc:18:1d:7b:0d:c4:08:
96:b5:5d:f2:d9:ea:03:fd:84:14:68:32:4f:0f:e3:bf:dc:bf:
1f:a4:b2:17:ca:13:44:cf:b3:ec:aa:2e:15:05:db:29:df:c0:
06:32:06:c4:39:77:14:d1:bf:00:2d:92:f9:c8:ea:b6:6a:1c:
6b:67:36:64:5e:91:79:7e:71:14:56:63:50:64:29:06:3b:0c:
6c:b8:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:56 2025 by rpki-client