Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.cer (raw, json)
Hash identifier: UTVQFtJ/RjvNGc1SOpmhqyY6mL2ipGapQtRBtqeOWKA=
Subject key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C0411C49DC3576DB118AC9288A69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.148.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c0:41:1c:49:dc:35:76:db:11:8a:c9:28:8a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:b0:e6:c7:35:30:eb:ba:a4:16:21:dd:9b:
fc:17:1d:18:bb:8b:6c:3a:9e:e4:19:61:d7:c2:e3:
16:29:43:6c:c3:d2:f2:ea:d9:90:bd:fb:66:bf:67:
95:ff:f5:b8:50:68:fa:c9:ea:c1:52:c7:44:81:d0:
c4:f5:25:ca:d2:ce:9e:d0:3e:c0:e1:eb:a6:78:04:
00:5c:6c:70:ac:62:ec:b0:51:ff:64:6e:98:dd:8b:
8c:39:b4:4b:29:cf:04:4f:7b:e2:72:51:f5:b6:03:
e3:79:f9:ca:90:e9:8a:f7:d6:c5:6c:65:ef:bb:b6:
32:1a:59:fb:83:cd:4b:9f:c5:21:9c:bc:3f:e3:50:
cd:f6:ac:3c:2f:be:85:54:c7:15:61:50:36:a5:37:
e1:61:1d:bc:c8:79:18:7c:85:70:25:1f:07:b3:bf:
f0:b4:67:e9:96:ec:9b:d4:7d:4a:1d:b4:1d:9f:6f:
a6:27:c2:a4:b3:12:5f:42:f1:96:01:0a:62:b3:57:
5a:0d:7d:9a:37:0e:f3:97:d7:05:01:89:46:a9:f6:
e7:56:e1:10:50:bd:17:11:ca:71:9a:09:35:70:ae:
a3:b8:6a:62:ab:a5:65:d8:b9:7b:7d:d5:81:6b:ec:
b2:6f:5c:5e:c3:c5:07:31:40:9c:ce:00:2c:98:53:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:16:54:4a:03:f0:42:da:0d:7f:07:3f:9c:ef:d3:29:6a:67:
5d:90:5e:26:44:53:06:e3:4b:4f:13:42:21:7d:11:99:36:f0:
82:55:4e:3d:24:3d:86:a9:d3:4f:71:80:3f:5f:54:18:08:7e:
2d:70:93:24:e1:b9:8e:a1:d6:1f:00:bd:8c:a3:38:2d:32:d9:
cc:36:d0:96:09:fe:e2:cb:f8:90:0d:23:fc:2a:d9:15:5f:4a:
34:d0:72:d9:b7:40:0d:0f:e8:5d:5a:25:02:41:18:d9:be:df:
a8:86:58:46:78:86:fd:d9:5f:2b:b9:a2:64:be:d9:82:ff:2a:
e9:3c:c1:be:18:09:cb:8f:1b:d7:a8:93:a1:81:c7:bb:5e:5d:
64:4d:3b:a7:86:3e:f6:96:ce:9d:1d:5e:2b:21:df:b1:30:ad:
e3:cb:f5:e2:61:10:13:1d:e9:bd:df:b2:26:f7:f7:e3:f4:99:
8b:2d:a9:06:48:69:b7:c1:b0:fb:a4:b0:aa:c5:b9:8c:f9:97:
3f:40:b8:22:40:95:b0:b7:ef:80:d6:d9:81:a3:39:39:92:30:
16:07:70:a5:69:bd:53:75:16:82:3b:ff:81:57:6d:08:1e:f5:
d2:19:ef:53:b8:54:25:16:ae:f6:e9:88:ac:e2:54:5b:3b:89:
ac:a8:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:46:03 2025 by rpki-client