Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
File: FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer (raw, json)
Hash identifier: mWVfdefA+iLDf1jdQGwQ6CitGfHNZKidkm0OgiJYWhA=
Subject key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E9C61689C13CAB83CDEAE23052EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.106.77.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e9:c6:16:89:c1:3c:ab:83:cd:ea:e2:30:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:10:fb:10:87:65:92:d8:75:a0:1a:09:8a:
27:31:0b:84:8e:e2:11:d4:04:12:4f:8a:e2:ba:78:
bd:83:8a:82:bc:1c:be:c9:50:b4:53:8b:53:8a:8f:
4b:c0:50:67:e7:2d:e8:4b:d0:19:3a:5b:d6:0c:43:
8b:00:a1:75:cd:1f:41:ac:bd:05:cc:9b:6d:9b:0a:
5a:65:70:33:e3:8f:b2:f6:19:50:fb:7d:83:1f:6d:
cb:d5:78:64:f5:16:51:dc:46:b2:11:10:fe:be:e4:
be:71:88:e2:ea:06:45:96:7f:38:51:b3:43:9e:64:
c4:cf:f4:f7:1c:36:fa:9e:ee:e9:cc:ef:45:26:d6:
e5:c6:2f:67:9b:c6:6d:d7:ac:ac:23:f0:2f:55:67:
0f:67:94:21:ad:ac:76:82:42:ce:0e:e1:e7:b0:61:
6c:a6:a6:da:58:68:34:0f:95:7b:0c:c8:ba:b0:a8:
4b:26:23:63:e4:da:12:57:7f:47:b0:86:57:dd:23:
0a:97:db:af:b5:04:d4:d2:1b:d7:76:1e:51:21:f6:
16:db:db:2e:b1:fc:92:bf:46:71:1b:50:2b:62:f9:
36:8f:dc:b9:af:1b:6b:b2:bb:3f:b8:bb:b2:b3:76:
51:1c:59:b1:27:49:e0:e9:f0:19:2a:12:c3:10:eb:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d8:ec:16:76:03:d7:d0:4a:f8:f1:5c:6c:15:a7:85:70:72:
76:e5:d1:74:11:4b:d1:c7:cc:35:be:dc:3f:3a:a3:36:bf:95:
1a:85:1b:da:fd:3a:4c:f7:54:f8:07:f4:2d:af:31:ab:eb:ad:
cf:14:5b:76:19:15:46:f5:3a:6e:65:e2:dd:19:59:2f:ec:28:
2b:4b:65:67:91:f5:c3:e3:bd:da:2b:0f:d9:d4:80:bf:7d:52:
1a:bd:29:51:33:d8:45:49:cf:66:ed:6d:30:f0:1d:ef:9a:1a:
86:06:2f:25:12:07:03:be:6a:bf:b3:2d:4d:e3:ca:c8:1b:c5:
8c:8a:65:65:16:70:d6:e3:de:34:a5:06:ef:13:41:e5:63:82:
86:ae:e7:d1:e2:41:7c:68:e8:26:fb:85:ae:85:08:d8:54:f5:
6e:52:69:fb:ba:89:46:46:6b:b8:24:29:f0:b9:de:1a:e4:59:
c1:89:75:4a:20:26:c8:ad:60:c9:5a:97:0d:38:d2:1b:a0:47:
8f:9b:39:09:43:38:94:bf:4a:34:53:4f:f5:48:f3:0e:d7:3e:
8f:69:f8:8e:f3:8f:12:89:1f:be:63:72:b4:44:2f:7a:f5:91:
c3:db:b4:b1:67:d2:fc:8b:a4:aa:d0:7e:c0:af:da:f7:2f:97:
cd:c9:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:04 2025 by rpki-client