Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
File: A3s99teDmfAxgoVW_NkOv99NDS0.cer (raw, json)
Hash identifier: KlL/5TVFUUiqxmrk94VN5swSD42ZJGbADx5bW30TFsM=
Subject key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA9E0F3B5A15DC6C83089101B026BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.34.120.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:0f:3b:5a:15:dc:6c:83:08:91:01:b0:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:ef:43:0d:12:a3:2b:ba:38:43:7f:23:4e:
71:91:97:6c:55:36:e2:d0:82:4a:22:0f:e8:c2:d7:
fd:50:b0:d2:0e:1f:80:53:26:47:d1:57:bd:1b:74:
51:fc:aa:e4:e8:0f:6f:5b:0c:9b:94:bf:4b:f9:3d:
5d:49:81:d1:92:73:eb:22:05:b2:61:8c:23:e4:57:
53:6c:0a:dc:c8:76:8c:6a:08:9a:62:c7:6c:eb:93:
ff:65:fe:61:6d:31:49:87:1a:e6:c2:0f:bf:24:13:
c6:3f:be:36:e5:f5:27:6e:37:0d:8e:c7:16:fb:26:
40:81:d0:c9:b6:50:fa:c3:ca:b1:39:6c:8e:ff:72:
3c:dd:9c:4a:94:8d:d3:9c:8c:04:b1:fd:af:97:2d:
0b:2d:36:cb:50:98:9d:ea:b1:32:43:e5:f5:e1:b1:
68:3b:97:23:2a:13:7d:75:d1:90:b2:92:c2:a0:1f:
ee:eb:36:b3:68:f4:7e:10:0c:44:90:dd:61:66:d4:
34:fb:99:d6:2b:ad:75:c2:d7:6b:cc:8c:01:e1:1a:
71:65:5b:5d:ab:74:ed:df:f6:00:c5:da:e9:12:35:
79:6f:c1:8c:72:eb:19:c5:45:55:e3:c1:82:bc:52:
47:f5:5a:f4:a1:28:53:5d:46:af:4e:1d:c1:3d:68:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.120.0/22
Signature Algorithm: sha256WithRSAEncryption
51:41:30:59:fc:12:74:ba:c9:21:4c:5d:71:5f:ec:97:4e:33:
9e:1e:62:b1:23:44:0c:a3:1a:8d:3f:ed:52:9d:50:8c:f7:08:
16:3a:4f:04:18:2e:08:c8:bf:50:77:20:61:c6:8e:d2:ba:96:
1d:9e:5f:a1:00:08:f4:a6:fd:2e:b5:34:4a:60:f8:39:f8:c8:
06:02:18:b5:ff:ae:16:92:51:00:18:35:22:c5:79:0e:97:03:
42:dd:63:90:f4:9d:e1:f1:03:00:25:a1:aa:eb:de:4e:a5:b8:
63:f6:41:00:f5:8b:84:5c:8b:56:37:13:e7:f1:44:76:9d:9d:
7b:ea:f9:92:d0:63:08:17:5b:bf:11:f3:1e:42:f4:5e:d1:07:
1b:53:9e:53:1e:dc:d9:8f:7d:a6:14:54:a7:c7:ff:c9:e5:21:
20:6d:6d:df:3a:71:e9:40:7d:1a:2b:3f:f6:19:af:22:64:dc:
3c:ad:7d:b2:02:25:1e:8e:c8:df:90:e2:08:b7:63:a3:aa:4e:
b2:75:c1:bc:84:44:88:37:4d:69:64:56:32:48:88:05:73:30:
9e:6d:e9:20:92:f2:be:f3:a3:c8:ec:78:f3:35:9c:df:ec:63:
8b:e8:47:a3:94:b2:0d:c7:e3:e7:9d:15:d2:63:97:2d:85:9b:
96:5f:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:28 2025 by rpki-client