Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
File: AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer (raw, json)
Hash identifier: 19gf1Bvb+gBTGpsgdrAZtvxm5u6BHGySOvcqLAt9Xw4=
Subject key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D36D9EA3CC8E14761183BA594650
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.50.57.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d3:6d:9e:a3:cc:8e:14:76:11:83:ba:59:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:aa:3d:53:7a:4a:6b:f7:e6:88:4a:ae:18:
2e:72:28:40:2a:7e:78:64:81:59:28:7a:7c:b0:6b:
15:f2:7c:3e:ee:64:a5:35:87:be:c4:f3:62:13:32:
0b:73:44:79:62:9c:46:9b:e7:db:50:94:c2:8d:e3:
ef:21:45:4f:a9:25:a5:cf:85:19:bd:3c:9b:49:e2:
3f:d3:1f:bf:17:35:ad:04:d1:52:e8:f3:4b:15:4b:
75:0a:82:91:d5:cc:ec:13:f0:12:ef:01:9d:63:dd:
6d:78:d2:a4:7a:cb:df:ed:25:7c:b1:93:e3:46:8c:
f5:c0:ed:f2:ab:f4:a1:ee:29:32:16:6f:6f:72:64:
7b:49:ec:7b:9d:48:bd:e9:a9:7d:d9:29:2f:89:0b:
cc:b9:60:77:14:cf:1f:c2:ac:33:61:e7:52:1c:dd:
01:29:e9:f8:e1:91:49:41:11:9f:de:2c:44:86:ee:
fc:bb:77:03:e9:7c:44:e6:8b:9e:c5:8c:4b:cb:30:
5a:8b:51:70:fc:a8:1d:28:5b:35:b9:5f:38:1a:9f:
02:d0:c9:31:cd:c3:78:14:93:b9:6d:eb:1b:48:d4:
d2:bb:6f:9f:f5:dc:aa:15:e3:09:d0:73:85:bc:77:
4c:6d:19:a7:6c:bc:6d:bd:d0:97:cc:21:8b:23:e5:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b6:20:c2:bc:c4:88:58:23:41:e3:fa:03:52:f0:e6:7a:b9:
bd:86:fc:19:f0:23:18:45:e5:1d:39:49:20:26:4a:07:b4:f2:
a0:24:72:c8:21:a5:7a:42:29:c5:20:3d:14:eb:81:48:4e:b9:
5e:e9:4c:ce:e4:62:9c:66:88:04:0b:84:32:97:41:7a:4b:6a:
6f:e5:21:da:4e:81:dc:73:d5:71:e9:00:64:6e:c0:85:a1:a5:
98:77:8a:39:f2:cd:22:a6:61:6a:5e:0d:ab:12:82:62:9b:38:
d8:1f:df:cc:4e:10:07:49:af:86:fa:ce:97:16:6c:cc:0e:fa:
2e:0d:ce:11:29:c6:58:b9:27:ac:2c:7b:fd:15:a6:53:c0:4d:
33:3a:c7:c8:d2:9a:e9:23:64:7a:aa:3c:67:28:a2:9c:06:47:
a7:23:08:8f:db:28:74:c3:80:93:ad:09:f5:e6:01:e0:8c:cc:
ca:a8:59:ec:ca:4d:0a:fc:97:da:1f:53:af:d4:36:ef:38:58:
25:c1:17:0d:60:d1:ec:8c:8d:16:f7:39:a7:d8:a4:87:93:eb:
6a:cf:e4:f1:a8:0b:5e:88:ab:d5:43:2d:df:3d:09:7a:20:ec:
39:1d:4a:e8:3d:68:5f:a4:40:23:7a:c1:30:d1:8f:7e:ba:b7:
46:4e:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:22 2025 by rpki-client