Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
File: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer (raw, json)
Hash identifier: UfSTfzHLFKVFSIoQFcH1mk6c+Tr4tmVI6aFJns3mJR4=
Subject key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252172E26CD6B38ECBF56A8B377212AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.120.17.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:72:e2:6c:d6:b3:8e:cb:f5:6a:8b:37:72:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:5f:25:85:e7:e0:a7:61:f4:59:a1:cf:6e:
d2:74:87:f8:a8:67:d7:14:d4:8c:80:67:00:c7:f7:
73:eb:9d:ff:d4:83:40:f2:eb:46:c5:86:50:25:d8:
7f:79:15:c5:49:e3:df:fb:cf:53:17:98:2b:9e:db:
91:00:e9:c2:d9:ed:1b:2b:af:84:73:32:b0:e9:4c:
ea:8d:5f:eb:e7:19:d9:51:60:61:fd:bd:c4:65:7f:
b1:41:08:07:54:0a:94:9a:7c:0d:d3:21:21:44:44:
80:7a:47:cd:81:85:0b:0c:c5:b9:7d:89:26:e7:8b:
0f:a9:53:99:02:e7:31:09:f0:c7:58:c3:6c:95:c2:
4b:ea:85:b3:41:a7:24:87:de:4e:49:2d:48:3b:62:
56:55:78:d8:0c:c7:49:29:98:94:d9:8e:21:8c:8b:
3b:57:8b:dc:e0:a8:7f:9c:bf:c1:10:39:f1:2b:d3:
69:bf:66:ea:f0:91:92:0d:10:74:be:c4:3c:33:4b:
9c:dd:8b:4a:da:a0:1b:49:69:f0:5b:4b:59:c4:6b:
64:df:62:2f:91:b9:68:5f:6a:0f:a7:3f:cb:69:3b:
96:c3:ce:b3:b1:41:2e:c6:7e:ae:0c:c3:2a:ae:c3:
0c:9f:eb:a3:33:33:4e:57:56:c4:96:13:2f:45:75:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b8:66:8c:69:c5:d8:3a:2a:ff:bb:f2:04:94:99:4b:39:77:
61:80:76:ac:68:4e:51:30:05:1d:01:fe:8f:fa:f3:99:9c:83:
31:f8:72:6c:9a:e2:b8:32:a4:2b:e9:ec:ff:7e:cb:17:83:d8:
de:87:73:54:9f:a3:f6:3c:61:d3:1c:57:8f:e8:34:7c:24:b2:
e3:77:6b:58:d4:91:f6:11:a5:28:cd:de:07:76:30:97:c9:da:
3a:2c:16:09:fc:26:34:6f:8a:92:40:bc:70:58:54:a7:be:5d:
2c:fb:0b:39:07:dd:cc:f9:3f:95:68:81:f6:0a:26:e3:f8:27:
5c:cf:c0:e7:39:84:56:3d:c1:41:fd:86:a6:71:58:69:8d:81:
f6:0d:a6:f3:fc:c6:0b:e4:4a:cf:be:2b:b5:f6:39:9a:79:9f:
14:59:02:dd:15:7f:0f:64:98:8a:d5:41:9c:78:77:dc:b8:94:
80:42:6a:e9:e7:e0:18:d2:3e:29:8e:8f:92:6d:6b:21:c2:11:
02:dc:a8:fa:9c:dc:8a:1d:01:cd:34:d7:7d:d2:ab:4b:ef:3a:
22:8f:58:e0:e8:88:3d:f2:5a:ee:0a:71:6c:ee:f4:1b:86:e1:
03:27:ee:cf:47:6d:54:6f:c0:2c:1f:22:4e:6f:82:75:f5:4d:
d0:02:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:59 2025 by rpki-client