Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
File: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer (raw, json)
Hash identifier: XWg+3e6K19rDs6ni0MefvKU7UZdrno0HkUmV7QbjHUI=
Subject key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427466BEF9C782BAA567B865270A1C52D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.7.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:6b:ef:9c:78:2b:aa:56:7b:86:52:70:a1:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:e0:3c:3a:40:ed:06:60:39:36:bb:77:6a:
61:3d:e7:5d:0c:9a:01:8b:eb:e6:f4:82:8d:17:ff:
55:3d:f7:8a:c9:46:c2:66:82:c9:68:18:01:68:d6:
dd:31:e3:4d:03:c0:f7:18:dc:28:5d:83:81:c3:db:
f7:f3:5f:84:49:4a:15:04:b1:d3:ee:cd:1a:00:7c:
30:85:61:76:79:66:f3:8e:c9:2d:53:c6:5e:93:10:
b7:f2:b5:5f:f6:d5:bb:18:56:83:d6:66:47:a8:49:
06:f6:67:6f:14:89:95:45:5b:86:d0:4b:b7:bf:c6:
61:44:5e:83:e4:7c:87:50:c5:d2:96:85:8e:b6:d5:
58:cf:06:df:54:16:ae:ef:b7:3a:5e:36:97:64:98:
9a:bf:f0:8a:cd:37:2f:92:54:72:01:65:1d:cf:cd:
ef:91:2b:2c:6d:12:c3:ae:82:e0:73:77:14:25:61:
c4:5b:53:e3:f7:bf:1f:5a:2d:fa:ac:de:36:ab:dc:
b8:e2:b2:37:5d:a9:ee:01:a3:a9:c7:f2:28:96:89:
96:35:00:89:d5:62:6b:68:a9:e3:61:78:5d:ee:81:
20:97:f0:92:bc:72:4c:dd:e0:22:0b:98:64:d4:3b:
3b:03:fc:f5:7f:10:d5:5e:88:06:c8:ad:6a:5a:8e:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f8:cc:04:36:d5:af:bc:41:e3:06:82:45:5d:40:e6:fd:22:
73:e1:cd:35:50:92:b7:7e:9c:c8:ca:1b:e1:90:25:db:6f:ea:
74:e1:f2:08:11:81:16:40:5f:5a:cc:2a:29:8f:9a:1e:a3:6f:
2e:bb:94:36:ea:db:63:a4:89:3f:6d:08:e4:cd:32:68:23:0e:
13:39:8c:0e:c6:69:5f:f6:8c:8b:05:ca:79:39:09:a6:99:fa:
5b:fe:5e:a6:0c:ca:a5:07:c8:6c:a3:69:c4:46:13:6e:6b:94:
ed:f5:85:c2:3b:44:7f:44:6c:df:a8:fb:57:a2:0f:89:c0:54:
61:ef:7a:d3:b8:7d:c7:eb:10:56:f0:9a:77:32:a2:06:f7:08:
fe:00:25:13:5c:32:d4:6f:5b:b1:ae:53:35:20:12:2d:a5:08:
9b:25:98:48:94:70:b9:ff:37:cf:48:d2:07:82:bc:7e:17:10:
9e:65:1a:92:b1:d2:fb:fc:54:6a:95:06:6a:1c:8a:de:6a:6d:
d1:a1:39:7f:cb:9d:a1:61:e2:ff:99:41:f5:a4:08:d5:58:cc:
4d:08:72:98:19:89:2a:e2:b6:dc:0c:ab:91:32:7b:7e:53:77:
5e:85:b2:7f:a2:27:16:f1:c2:70:7b:ae:46:96:c2:5f:bb:72:
40:f6:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:11 2025 by rpki-client