Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer (raw, json)
Hash identifier: NRvN/pVrorCVsJo7mEZoCPbAakAgjHdS2vCdYcgV3KA=
Subject key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B379A4F1400A7986EC8A02116F96D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 157.97.68.0/22
IP: 185.20.236.0/22
IP: 185.232.188.0/22
IP: 2a00:5320::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:79:a4:f1:40:0a:79:86:ec:8a:02:11:6f:96:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:77:94:6a:8b:ee:05:f9:d5:77:b1:08:86:
96:8e:0e:9d:ba:b4:7d:8c:de:b3:00:9e:86:8b:fe:
0d:ef:49:03:f8:e8:d5:47:28:f8:e7:01:91:68:78:
09:04:c9:76:74:d2:e5:ae:6b:57:ed:ef:77:b4:14:
3d:e0:eb:cb:9e:6c:b8:f8:45:dd:e8:86:66:7e:10:
05:c3:62:b6:0e:0a:41:5e:34:9c:91:74:89:c8:3e:
0f:e3:c4:7c:57:63:8c:5b:eb:93:0a:36:31:8c:e4:
ef:55:78:b2:ff:f1:3a:78:3b:f8:1f:b5:16:89:0f:
8b:f6:3c:92:04:c3:bd:87:d7:20:c1:f8:3c:6b:da:
35:b8:15:13:de:2f:f6:42:11:35:96:51:a7:cb:07:
8c:9a:fc:28:e5:81:4c:51:61:a5:ae:1c:ec:c9:69:
1d:d8:6b:d0:b0:b4:bf:05:fa:e6:b1:63:51:eb:bb:
f8:06:81:6c:17:60:07:8a:ac:94:c8:09:c8:ef:e9:
10:ca:ce:20:93:18:29:bf:47:31:f5:b5:51:a6:a8:
8a:b6:ea:37:56:ae:0f:ab:dd:05:d3:eb:a2:3e:07:
13:68:c2:07:87:cd:95:c7:d0:7e:05:46:8c:b2:8c:
ee:60:f5:7e:9d:21:39:91:80:3c:68:3a:7c:41:76:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.68.0/22
185.20.236.0/22
185.232.188.0/22
IPv6:
2a00:5320::/32
Signature Algorithm: sha256WithRSAEncryption
72:bf:15:5f:4f:a6:38:5e:57:46:b9:ed:35:8c:99:55:42:d9:
6f:6a:0e:5e:63:2c:66:3c:29:02:31:6e:1e:d9:7e:f3:d5:a6:
4a:4d:7e:25:5e:cf:26:5b:da:9f:ff:57:3f:b0:20:71:97:fe:
18:98:06:36:42:56:13:40:e5:9d:3b:f0:6f:4e:bd:b1:93:c4:
b7:27:fb:0d:53:58:dd:6e:14:3a:8d:0b:b4:51:ea:eb:d7:e4:
b2:ad:c1:d9:2c:3f:81:19:22:3a:11:05:82:36:33:83:d3:64:
c9:d1:90:bb:2f:f0:66:dd:2c:10:07:e6:a0:37:b4:e6:f9:7d:
ab:ed:67:88:c5:00:32:2e:ba:1d:d1:e1:0d:36:eb:d1:a4:f5:
45:e2:bb:58:6b:13:06:fc:61:25:21:95:ef:59:09:09:d3:59:
6c:a4:8f:b0:f6:11:02:2d:cf:b0:61:2f:ff:c7:23:64:49:b3:
61:80:11:a2:32:8c:89:74:27:81:83:b8:55:9c:46:00:a4:8a:
9f:7d:26:38:f5:9c:6e:24:db:61:4f:12:ac:5f:f7:dd:95:5d:
1e:6e:0e:db:7e:6d:df:e3:89:2a:4d:0c:cd:0f:bf:56:2d:5a:
bc:fc:50:c6:b1:6f:37:4e:53:50:66:a9:c4:21:3e:45:cf:b4:
e3:09:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:01:00 2025 by rpki-client