Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer (raw, json)
Hash identifier: aTEIE19YTgzZDGM0ZRa8b5LhiRCQrIzNe76TFl2Xkao=
Subject key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6E36D39C7A1BA9EFD0D2A37926825
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 95.161.140.0/22
IP: 185.213.212.0/22
IP: 2a0b:8fc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e3:6d:39:c7:a1:ba:9e:fd:0d:2a:37:92:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:96:62:94:28:8a:10:ee:b6:9a:47:99:6f:
3e:7f:83:d5:38:01:32:7d:58:c0:eb:d8:b2:7e:35:
4f:df:0c:7c:73:8f:36:2d:47:88:5d:8e:64:af:85:
c0:db:53:40:d7:ec:eb:8b:b5:e1:30:a4:a6:72:09:
18:f0:55:eb:c4:41:ec:15:41:37:9d:ce:6d:43:24:
9c:9d:f2:ab:4f:9d:6e:28:da:0d:df:f8:e2:2c:9c:
19:00:a8:74:cf:6e:8d:de:3c:77:bd:fa:60:18:3c:
20:c2:03:2f:b0:57:dd:cc:a3:cc:a2:21:d3:27:ea:
ed:f3:d7:30:88:ea:b0:b7:1a:9c:e1:8f:cb:26:f9:
f4:a1:9c:d1:e6:62:a2:23:8d:c2:23:11:28:f9:01:
fd:8e:2d:4e:68:b8:4c:ab:4b:8b:03:23:42:73:7b:
7d:8f:78:45:15:54:2a:3b:f8:1d:e3:eb:8d:54:bd:
b2:ac:74:b7:3e:95:c9:98:2a:98:19:47:6d:89:1b:
6d:af:e3:bc:f6:d1:33:d4:0e:d9:b7:6d:e4:ea:99:
47:75:e8:8b:72:4b:dd:31:26:65:f8:ea:b0:48:bc:
30:c3:23:d9:9d:36:a4:ec:46:46:dc:96:c2:e5:43:
41:ca:08:e3:f6:dd:98:89:87:1c:91:7a:99:bd:29:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.140.0/22
185.213.212.0/22
IPv6:
2a0b:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:69:4c:6b:97:22:0b:59:55:4a:94:08:ff:2b:95:d6:9e:8f:
57:6e:16:d2:3d:ed:ec:cb:1e:fd:37:ee:08:c6:da:c0:b3:0f:
79:5d:4f:2a:55:c9:7f:8f:8b:5b:0a:c5:1d:fa:1a:b6:e2:02:
09:77:d1:2e:4f:71:6d:6a:2e:45:9e:0e:90:d0:9f:a2:ff:0f:
1b:91:7e:1d:fa:a0:b7:e9:3b:f4:ab:e1:96:32:52:f0:ad:98:
53:70:ef:67:a5:42:0d:ea:53:f5:c5:5d:75:59:19:99:96:57:
c0:22:de:ed:4d:f9:ba:f2:1f:fd:27:ea:1b:62:2f:b0:75:50:
09:d7:f8:d8:9d:26:f7:92:e4:4d:14:e1:7f:ea:26:db:b5:45:
66:85:16:50:ef:2c:4e:b8:9c:18:1d:61:6a:dd:b1:f0:3e:a0:
6f:02:90:c8:c9:65:39:bd:4d:4d:78:b7:15:3b:ec:5d:a4:c6:
af:a4:bd:8c:a9:55:77:56:dc:0a:f0:dc:0b:22:49:df:90:52:
8f:b3:3b:e9:fd:f1:8a:30:a6:45:aa:41:5f:f5:d3:9d:1b:68:
f4:39:f2:af:ef:af:de:be:2b:c9:07:de:76:4b:81:c2:07:0c:
e1:ca:c6:d3:3c:1a:f7:14:1e:ab:c0:b4:55:90:3b:55:92:08:
5e:56:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:30 2025 by rpki-client