Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.cer (raw, json)
Hash identifier: 8H4Qmet4zLWCQQkRVe/MIRDcSKP2LUwED9btD4CUg7E=
Subject key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427485276000346FAE5274BEA20516E99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.98.200.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:76:00:03:46:fa:e5:27:4b:ea:20:51:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:e4:e7:f7:e4:c6:54:31:63:34:0b:a6:5c:
6c:a1:2e:94:d7:f8:2c:57:07:51:5b:38:06:f7:5b:
88:d3:9e:e7:fe:47:a0:36:9c:5e:73:64:dc:03:c4:
68:9a:cb:49:70:58:bb:4e:ed:19:ee:c0:ed:05:09:
35:5d:04:e3:21:0d:85:ce:eb:6f:1e:c4:39:bd:6e:
03:20:78:f4:67:e6:ea:c7:12:99:a0:11:6a:7c:8d:
bb:03:27:20:18:d8:9e:fa:63:95:1d:87:70:2c:89:
3e:41:98:79:0f:0c:2b:7b:e0:fb:3a:3e:6c:16:77:
ea:2b:00:d4:10:07:0d:20:43:d9:0c:a2:ec:83:bd:
e0:81:41:19:32:57:13:fa:a6:a8:11:43:87:5f:0f:
a6:87:4a:1a:9c:6f:fe:e0:2b:a3:c7:b5:65:97:df:
11:d8:b7:80:cc:51:f4:3e:6d:3f:3a:00:94:3e:4e:
66:de:55:7b:6e:ed:95:d8:69:d2:cf:c7:9c:8b:b9:
52:87:4d:a6:4c:db:e3:2b:e1:54:1d:ff:3d:ec:c8:
f5:06:f6:8b:a6:f7:7a:5e:b3:f1:0d:94:26:95:8d:
3a:1c:e9:9e:75:4a:6c:f7:81:4f:d1:53:56:e6:58:
10:bd:07:70:47:64:b6:35:02:ae:a6:8c:59:ce:1c:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:01:7c:89:05:9b:6e:ab:e0:80:4a:ce:86:05:33:2b:74:37:
07:db:7f:f5:01:f6:a2:0b:49:a5:89:1c:08:5c:36:85:bb:59:
16:61:f1:15:0b:7c:71:82:d5:d6:42:bf:07:9f:17:77:47:37:
78:df:10:67:94:82:5b:f6:ab:c7:a6:d8:c2:86:4b:97:59:7f:
ce:3a:88:b5:7d:41:f2:ee:c7:fd:28:1a:98:aa:a6:76:a3:4e:
a4:c0:55:ec:5b:3d:3d:f2:cd:7c:59:f6:54:ca:fb:ff:10:97:
5f:bd:b2:f4:21:02:7c:82:2d:25:0e:a1:df:15:8d:82:9b:80:
27:4c:32:2c:c7:3f:e5:22:bb:43:b9:3d:20:7e:a5:cf:f1:0c:
c2:ea:50:73:17:bb:c7:88:32:b7:99:53:57:99:ca:08:55:ce:
ac:a7:23:dd:f4:9a:18:2b:31:5d:8a:40:a0:26:9f:7a:3b:4e:
1c:48:8a:2f:b8:25:c3:d6:97:01:6b:7f:26:99:1b:72:7e:fa:
74:e6:5f:cd:a5:08:3b:4f:8f:ab:33:ac:74:e7:b5:d4:c7:53:
1d:52:37:1c:91:c7:c7:08:99:5b:7f:91:c9:a5:c0:e0:ca:1a:
43:c1:0a:b3:4f:4f:c0:c1:37:a3:11:7e:56:79:60:d6:ea:5d:
14:82:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:37 2025 by rpki-client