Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.cer (raw, json)
Hash identifier: DFANN0qlx6TApr86LARFbjEENvoDA8G/3amYSoQUL7A=
Subject key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F982FB3A649ABED3025A9857B9A2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.208.252.0/22
IP: 2a0b:5dc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:2f:b3:a6:49:ab:ed:30:25:a9:85:7b:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:fd:4c:f3:11:c5:1e:61:ae:a0:15:9a:8f:
bb:e8:0a:92:03:d5:0d:5f:cd:19:0f:bd:10:83:7e:
23:2f:34:7b:fc:8b:b9:8a:a2:9e:e2:5a:9b:94:19:
1f:41:44:a4:cb:87:26:01:59:54:2a:6e:ef:3d:dc:
7d:75:11:a0:13:e2:e9:c5:4d:3d:53:34:07:5c:39:
b7:79:cc:e3:88:0c:1c:3f:7c:88:85:fa:f3:b1:46:
51:ff:e8:8b:97:49:b3:94:d6:e8:2d:1b:ba:a9:a2:
38:91:bd:3d:2e:b5:9a:a8:0b:97:9d:c4:51:9d:4e:
09:1a:00:13:f8:31:ba:27:3d:5b:00:fd:15:0e:16:
20:1c:0d:26:2f:6c:fb:63:42:e8:ef:29:2f:f1:a6:
cc:5d:50:c4:b4:36:e8:af:a7:8b:5a:d8:35:70:7d:
6c:ac:22:ae:93:d9:41:ad:bc:7c:10:91:7d:56:7e:
99:ac:c7:1b:5f:e3:80:42:99:5b:29:22:00:5e:c2:
8a:c9:77:80:72:1f:bd:0f:f9:22:2a:01:44:31:62:
a2:5e:f2:e6:db:00:34:ed:2f:28:36:f0:9c:68:62:
84:29:08:95:7e:29:1a:9e:bd:a2:92:cc:ec:15:bb:
e5:4a:32:6f:dc:bc:36:38:c0:10:79:23:07:c3:8e:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.252.0/22
IPv6:
2a0b:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
13:c6:e1:be:ac:ec:77:0f:3a:a3:1e:d4:fd:78:e4:99:5b:ee:
51:80:6a:72:20:c8:c1:8e:c3:c5:64:87:86:43:9a:d6:28:41:
e4:ec:b4:83:e1:14:e8:61:67:ca:1c:de:55:31:0a:40:6e:90:
a2:19:24:7a:56:41:3e:ac:9e:1b:98:52:e7:36:fd:8c:1a:a2:
ba:44:c1:71:67:05:1d:48:ba:42:b7:e3:49:79:1f:c3:b4:cb:
53:73:7e:59:39:ac:29:85:f5:cb:2c:12:c8:01:dc:3f:d4:4c:
c5:1e:7c:a0:4f:b2:3d:39:1c:96:38:65:86:e8:f9:6a:f7:8b:
86:ee:83:02:09:61:2c:a2:ba:9c:e0:59:01:7d:a0:a2:57:8e:
94:27:90:53:a4:e0:96:3c:7c:2c:33:44:75:c4:27:d1:44:42:
0a:84:93:4f:a3:9d:ec:8f:de:d8:06:3a:d8:f2:1f:dc:89:87:
69:f1:4c:86:11:c1:d4:4e:85:12:35:27:db:c8:26:35:4a:35:
11:15:35:a2:d6:aa:e5:8b:c5:ee:b5:a9:6a:ee:e6:67:59:f0:
ba:2e:2d:ba:5d:48:39:7d:12:9e:e3:a9:e4:25:78:43:dc:31:
60:43:e2:43:b0:e0:e1:e2:17:27:06:57:98:8a:1d:dc:a6:de:
af:b3:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:03 2025 by rpki-client