Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.cer (raw, json)
Hash identifier: ceWpnEkPZm5vbd3WaOizN44KcDPLRbkCLmpdjc6RdnY=
Subject key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143FEA2758F128A0C6B3B01500D8452
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25081
IP: 81.89.192.0/20
IP: 185.213.96.0/22
IP: 2a04:c940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:a2:75:8f:12:8a:0c:6b:3b:01:50:0d:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:3a:2d:6b:17:1a:ae:22:c9:df:0d:3d:8f:
94:a1:df:a7:0e:18:ae:78:8d:bb:fb:27:ad:13:b5:
84:8c:79:c7:04:88:24:65:ce:67:aa:48:55:d8:da:
bf:f0:30:c2:14:dd:f2:85:78:00:15:9b:c9:90:dd:
db:3e:4d:e7:dc:6d:9c:42:2e:68:1f:d6:28:c4:02:
89:49:c7:0f:03:82:46:e5:5b:49:ec:03:84:f2:fd:
5f:3b:0a:89:a8:72:43:37:48:66:d6:23:95:65:95:
44:29:ad:e5:af:64:1a:01:7d:7f:a4:8b:7e:c1:4b:
08:36:1b:e4:62:47:28:43:cd:f8:16:de:19:03:ef:
66:56:dd:2a:53:d8:c7:d9:b8:b0:8e:41:68:77:99:
65:4a:46:a5:d4:2f:2d:f6:10:01:4c:42:cc:e6:de:
2f:f8:fe:2c:48:4a:61:a9:7e:f0:0a:07:31:eb:2b:
53:fe:d4:b3:67:42:84:4e:82:02:96:cf:df:96:7b:
1f:7e:70:82:40:3c:a8:5a:dd:e9:e5:d9:fd:cb:fa:
b2:d9:57:a0:d1:c3:3a:e8:01:ba:c3:f5:3e:5b:71:
d8:ea:b8:10:58:de:a9:5b:8c:8a:06:df:94:b6:1a:
bc:ab:5e:90:0d:c9:7a:9a:db:9f:02:98:d2:3c:c8:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.192.0/20
185.213.96.0/22
IPv6:
2a04:c940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25081
Signature Algorithm: sha256WithRSAEncryption
51:cb:87:ac:a8:81:31:60:e2:53:ec:d6:3c:e4:28:0c:d0:30:
e6:d5:52:1e:96:5d:91:c2:f6:92:da:48:ae:86:51:9b:38:26:
e0:be:2d:d4:a7:2f:b2:2e:a3:77:5c:bb:43:0f:09:e5:e4:cb:
fc:50:b4:1e:b4:1d:04:85:73:a9:2f:57:d3:8d:b6:12:b2:5c:
7f:a1:a6:08:00:17:e5:ed:da:04:e9:29:af:f9:6d:79:12:ed:
99:a7:30:55:df:e5:c8:35:be:4d:f8:d2:4a:55:f7:b0:30:49:
5e:73:c0:7d:b2:8d:62:5c:98:be:1a:66:59:d2:89:0e:95:ce:
a1:11:ba:48:d8:b2:60:de:f7:da:07:fb:90:5d:fb:f0:c0:a9:
0b:6b:5b:76:6e:dd:08:7f:67:2c:b6:45:19:97:3f:9e:f3:cf:
a0:5d:b4:28:3f:5d:8b:ad:9c:ce:22:07:48:21:07:f0:12:18:
04:9c:df:7b:f0:77:58:94:21:24:61:d5:43:b8:70:00:26:d0:
24:de:12:8b:61:c3:40:25:ef:ff:05:6a:58:b9:e3:34:2e:0f:
f4:73:d5:7b:b2:9d:69:49:a6:62:cf:3a:c3:92:d9:a6:fe:10:
4a:50:a3:a8:d1:cd:11:dd:e4:15:41:d3:cf:24:8b:c2:d3:1f:
90:a1:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:10 2025 by rpki-client