Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
File: J582UuRFj6ABxnOKQUJbB-cMkaE.cer (raw, json)
Hash identifier: IX5r6Pr/7ZOsaW7NFImDV9ek3HXZQnuekw/uEObD6L0=
Subject key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C6D26DF7F1C80C698E769C0DCE551
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 139.28.68.0/22
IP: 2a09:f980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6d:26:df:7f:1c:80:c6:98:e7:69:c0:dc:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:4d:a7:9e:50:cb:9c:31:0c:cb:43:bc:02:
a8:79:19:c8:84:af:2d:bb:92:1b:79:18:ba:d2:80:
94:ba:ff:5d:21:13:13:4b:37:8a:3a:21:ce:6a:97:
a2:0b:0f:89:d7:17:f0:be:22:6b:b3:03:a8:7c:9a:
34:23:d7:1a:c2:22:52:64:54:3d:14:1f:b1:2d:6c:
cb:2e:1a:69:15:e4:b8:eb:e6:18:3b:b4:38:57:16:
ee:80:c0:b3:f0:51:18:41:3c:fc:03:3d:8d:8b:bf:
f0:d5:c2:8f:83:e5:73:a8:d4:b1:12:b8:62:5e:1e:
61:d1:4f:b5:e8:de:37:8f:86:e8:7b:15:bb:84:cb:
c6:39:d7:1a:40:cf:74:81:6c:bd:09:95:bd:49:bb:
da:0d:1d:4f:ea:c9:e9:b5:4c:ff:2f:ae:06:4a:bb:
8b:5e:a1:db:0b:07:aa:9e:71:cb:26:7d:3c:d5:a3:
59:7e:9f:f1:2a:62:64:b4:99:85:53:cd:8d:34:82:
81:ab:b0:a1:ca:f1:0f:fd:ba:c3:ab:b3:a1:82:5b:
e6:a2:76:2d:00:55:ce:ab:75:c1:71:1d:89:ea:23:
28:c4:bc:36:49:0a:7c:b2:8f:2d:34:45:f8:68:07:
79:bf:76:43:f8:26:a3:a5:b0:70:b2:92:3d:4b:56:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.68.0/22
IPv6:
2a09:f980::/29
Signature Algorithm: sha256WithRSAEncryption
82:dc:63:ac:c7:b5:08:77:8c:f7:c2:08:74:bb:4a:32:f0:d9:
14:ba:cb:d9:6b:77:a1:1f:c7:c6:1b:95:eb:f6:73:ef:2f:ee:
a6:b0:0a:63:a9:8b:d3:92:8a:1d:44:82:bb:72:ed:b4:29:65:
4c:9e:63:e8:be:3d:56:b9:50:be:55:96:0d:db:4e:73:06:18:
d5:cf:0d:68:9a:27:1e:47:b2:90:41:8d:96:14:f6:12:1e:82:
a8:10:5f:68:20:1c:01:b0:05:87:ea:08:6f:0c:56:0f:76:b0:
e3:e2:72:05:13:3a:a0:65:96:ac:22:fd:af:f4:d3:fb:09:a1:
cb:f0:78:f3:6e:f4:9c:a4:a5:f9:6b:81:41:42:ed:93:cc:22:
8c:0f:3f:29:fe:5e:74:cb:d5:b4:95:00:8c:6c:fb:70:7d:e6:
67:e9:61:42:d9:5d:be:9a:d0:8e:83:ce:0d:65:cf:9b:8d:13:
79:eb:ed:08:04:88:99:1b:4d:e1:f2:89:e3:0e:5b:f6:1d:7b:
9e:f8:94:4d:1e:e0:e6:30:9c:16:fe:c2:3d:4e:02:5a:7d:38:
aa:60:43:72:b1:d5:29:44:6f:6b:f7:d7:a1:d7:ee:0c:20:9a:
5d:d2:e6:c7:9e:81:18:fc:c3:0c:a8:76:ad:4d:df:76:c2:0e:
45:75:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:44 2025 by rpki-client