Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.cer (raw, json)
Hash identifier: 9pYMCFI4IpujcNzQkhyaUXgewNEn9+pI5ysNEvGueUI=
Subject key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747FDD04B8C4705BF8F9FE44F026603
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.107.247.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:d0:4b:8c:47:05:bf:8f:9f:e4:4f:02:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:7a:b3:df:3e:f9:84:b2:01:85:c0:a7:15:
59:02:65:19:86:25:72:b8:7d:cb:7c:02:2e:1c:37:
10:3d:ab:f2:b8:9a:6d:15:d1:7a:e0:98:d5:64:e9:
c9:ae:9f:d7:56:86:f4:9b:f6:04:b8:3d:db:20:3f:
82:28:f5:bf:c8:5d:a3:c5:e6:a5:2b:31:c5:e3:0c:
31:40:a4:61:ce:b7:a0:08:82:c9:5a:20:94:f3:54:
a6:dc:bf:7b:67:9d:33:22:06:73:d7:7b:92:1c:af:
64:24:0f:a0:d7:e2:df:b2:4b:77:c3:fa:ad:4b:6c:
81:e0:66:56:1e:10:74:02:9e:3d:50:0a:f5:45:92:
da:60:07:64:c0:a3:86:54:84:be:af:d3:ba:d0:5d:
e2:61:f2:9a:cc:8a:88:a9:e8:43:8c:72:a7:de:89:
0f:55:8c:b0:89:8b:98:46:2a:00:a1:e4:fe:07:ec:
7e:c2:f7:37:d9:fa:30:7f:38:a2:a2:0c:67:28:a0:
48:11:de:ec:7f:0e:ae:6a:82:ce:5d:d1:8e:af:01:
9b:de:c8:9e:89:0d:af:f6:b1:7f:34:bc:27:0c:41:
4a:37:19:6e:a9:4a:08:e5:c5:bb:53:b0:c9:23:44:
3f:52:45:d4:fe:e2:2b:e3:1a:40:01:33:0d:65:cc:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.247.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8a:7c:71:de:1d:6d:58:d1:9e:2a:16:0f:90:b1:9d:0c:c4:
de:a4:5c:28:ea:4e:4b:df:10:5c:ff:b7:0d:d9:94:61:e3:66:
d1:c7:55:77:35:ae:db:c9:97:aa:2e:df:66:d6:13:e9:29:6e:
aa:4b:55:59:97:35:1c:e4:5f:c8:3f:07:7c:51:5e:d9:92:e2:
d2:77:90:a7:64:6c:2c:5d:dc:8d:15:07:75:e2:89:67:03:43:
19:27:e0:6f:c5:c3:c6:17:2a:3e:92:d1:c0:e3:4b:d5:4e:93:
51:21:28:79:89:3a:fd:55:2a:fa:f7:80:a4:87:07:d1:9c:e7:
be:fb:97:37:f8:fd:29:80:ad:21:7a:64:b9:be:00:77:dd:6a:
bf:b7:4c:05:73:c9:57:c9:42:b2:04:8f:32:7d:2d:df:2f:d8:
38:6b:50:74:f9:99:f2:f9:49:9a:16:55:f3:f2:9d:81:17:4e:
9d:23:f3:bb:3d:a8:f6:6f:37:80:40:77:4e:05:04:3c:fe:61:
91:24:a1:fa:4a:b8:ab:48:71:d4:14:66:21:89:de:9d:82:46:
b3:d5:ee:17:3d:6d:0d:b8:62:e2:63:7a:fe:1b:db:68:21:0e:
21:09:5c:83:7e:8c:6a:19:61:43:fd:a0:c1:99:c7:2a:d9:d9:
70:4c:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:43 2025 by rpki-client