Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
File: CovKGg6GRItz2lTELLDXV2U3Pyc.cer (raw, json)
Hash identifier: 9zdpArhB2szJZoKas1984RDx7vCQKTtP+GG9JhF5V4c=
Subject key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421442FAC52AE263D1DDBB712BD3C12EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.35.112.0/21
IP: 46.255.168.0/21
IP: 77.239.32.0/19
IP: 185.74.112.0/22
IP: 2a00:d420::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2f:ac:52:ae:26:3d:1d:db:b7:12:bd:3c:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:a5:a5:ce:6e:0a:e6:fa:e6:71:d8:13:d6:
7c:50:56:47:5e:6b:17:8f:43:89:66:ed:f1:7d:04:
a2:39:25:73:09:4d:34:dc:55:eb:6f:19:a9:34:b3:
29:08:78:00:02:4f:4b:a5:3d:27:7c:c4:70:5d:7b:
94:9e:51:d2:11:b6:aa:ae:23:b6:37:aa:67:b0:94:
97:01:46:93:05:88:2c:bc:79:d8:5e:17:78:16:1b:
b2:79:2f:c9:92:20:28:1a:68:bb:36:93:fe:84:d3:
d4:eb:66:60:d0:e2:7f:95:02:af:59:35:e4:f2:38:
cc:fe:1d:54:10:17:9c:f2:7a:e0:21:04:8d:f9:89:
20:b9:21:23:68:4c:5f:2c:c1:61:41:7c:db:23:5b:
13:4b:ae:31:7f:36:4d:4e:b4:41:ea:81:65:a0:fe:
d5:c2:d0:db:71:71:2f:50:f0:e5:5c:f2:48:44:e9:
80:d3:82:94:db:b5:09:87:dc:47:29:b7:53:63:28:
6e:2c:2a:f4:c3:c6:86:da:cf:d2:db:6b:92:19:18:
09:29:61:d2:44:82:52:ab:1a:2c:24:6b:9e:0d:3f:
16:01:a7:99:4d:1f:e1:47:1d:da:12:a6:86:28:68:
17:d5:d3:7d:a4:3a:2b:a9:65:af:37:10:57:25:8c:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
59:aa:86:da:bd:29:6e:5b:00:24:6a:e8:c7:67:f2:b4:71:37:
3f:1a:be:fd:2a:f4:9e:81:4a:1c:90:2a:68:85:a7:30:dc:db:
f0:95:ea:cf:9e:d9:03:89:f0:28:ae:e2:81:a1:62:61:3e:a0:
81:de:20:7d:6c:7d:72:50:b3:0a:e7:15:3e:b2:bf:b7:64:73:
4f:6d:71:54:c7:b2:f0:91:74:ad:ae:8d:1f:f6:f0:4a:6b:08:
b8:e4:72:a1:07:38:07:01:74:22:cf:e3:03:71:45:aa:c5:57:
0d:85:1a:25:17:24:60:da:1f:df:50:bb:bd:8b:2b:fb:dc:be:
fd:2c:78:3c:79:6b:dd:23:13:28:f6:26:00:65:64:90:70:0d:
ee:3b:e7:a8:03:3a:02:67:9f:43:dc:bb:4b:aa:16:3e:46:6a:
22:2f:f6:1d:a8:fd:a6:95:68:75:ae:e3:91:3d:4f:e3:65:b0:
c4:99:0c:72:ea:ea:49:e5:43:ef:d3:5d:c3:c3:58:0f:bd:f7:
a3:d5:f7:72:9a:ff:50:0e:11:0f:1d:29:eb:f9:27:3a:3c:bf:
36:3e:ba:ae:ff:1d:1f:20:68:f5:3c:c6:bf:44:ca:6a:0b:7c:
a7:a9:02:b5:ee:3e:ab:7a:3d:27:24:4f:3c:cc:2e:d9:f7:8c:
39:54:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:37 2025 by rpki-client