Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.cer (raw, json)
Hash identifier: v+PX93gPD9qES2QQqE0qdQBN8gQIIX89g42NMSvA7yw=
Subject key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2906207F2E3382803BB8D7CA04DB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47777
IP: 46.19.56.0/21
IP: 94.125.24.0/21
IP: 185.15.180.0/22
IP: 2a00:1b40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:90:62:07:f2:e3:38:28:03:bb:8d:7c:a0:4d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:d7:3e:ff:cb:72:0f:6a:e0:2a:b2:de:7c:
5d:8f:77:40:69:c6:9e:6e:9e:71:72:9d:8c:c4:c5:
40:92:e2:72:55:9e:cd:95:71:33:55:c7:08:e4:46:
e4:ee:a6:94:4b:d9:c7:10:af:97:cf:58:08:3c:dd:
e6:76:8b:5b:df:ba:d8:95:fd:21:90:ac:ee:a0:52:
b3:c7:62:c9:57:3b:24:19:5b:c9:61:c4:b2:aa:b4:
c5:44:55:db:3b:03:df:95:90:13:0f:53:71:ec:38:
e6:8c:a2:ae:d4:6e:c0:1a:3f:7c:f4:b8:82:b9:e2:
d2:98:d8:b4:96:bd:97:d8:c4:5b:1b:a7:5c:36:a5:
91:63:5a:ad:25:9d:06:cf:5b:e0:2b:54:01:ff:95:
7a:61:52:4b:82:4b:ed:ff:c5:cc:52:88:cc:cf:ce:
c1:8e:61:51:66:9b:b3:fa:2d:34:a3:80:4b:f9:bd:
cf:98:79:c0:93:e8:90:19:f7:93:b7:4a:db:7b:ae:
2b:35:85:b0:ec:73:2b:71:b9:82:e0:4e:08:72:ad:
5b:49:ff:f3:f8:d8:49:ec:7f:b5:ac:7e:89:6e:69:
e1:4d:7b:15:ce:26:5d:31:db:f3:55:ee:46:de:7b:
dd:5c:4a:58:00:e2:eb:25:4d:83:0c:ce:83:f6:a4:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.56.0/21
94.125.24.0/21
185.15.180.0/22
IPv6:
2a00:1b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47777
Signature Algorithm: sha256WithRSAEncryption
1c:a5:ef:aa:40:2a:7d:7d:0f:68:bd:d4:92:2b:73:bd:63:71:
55:62:e2:4c:38:11:39:4a:c2:a8:db:14:6e:bc:be:ee:49:87:
da:9b:c4:8e:25:67:c6:d6:26:85:b6:bd:39:e0:cc:dd:e7:3f:
53:a0:b8:59:ed:80:bf:81:70:11:84:7e:ad:81:24:91:57:8a:
85:f1:56:d4:cb:09:dc:00:2d:74:f2:63:d7:43:14:8e:97:c4:
fd:8f:65:29:61:f5:49:fb:f7:2e:5d:43:5c:97:ab:af:b2:4d:
4e:37:9d:90:b0:d0:2d:02:39:1b:b6:6e:96:e5:fd:b2:f0:37:
61:9a:4b:f8:ec:06:dd:4c:9b:9f:ad:69:e5:93:8f:3f:76:43:
f1:b1:20:53:03:0e:d6:9f:8e:43:a4:5c:94:8c:85:42:3b:7d:
0b:ce:b6:3f:ed:75:72:1e:1b:fc:52:01:d3:d0:8b:bc:c6:6d:
be:1d:64:ed:0f:0b:fe:68:87:f4:a2:9b:32:32:86:44:b8:3d:
45:b5:b0:33:34:f4:a2:33:9c:f2:c2:d9:e4:53:de:c4:65:6d:
49:26:c2:ad:31:ec:26:27:de:03:8c:47:ee:96:c7:ca:2c:c8:
ae:df:a3:ad:57:45:b3:c2:61:bf:e2:8a:b2:91:c9:e6:7b:f9:
70:ba:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:56 2025 by rpki-client