Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
File: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer (raw, json)
Hash identifier: 4Dltbz6L8rs9KChwgWqEvUyX4WclTVxsQXvUWay/0bY=
Subject key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274822990D058511121956059748A6A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.209.40.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:99:0d:05:85:11:12:19:56:05:97:48:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:8c:36:19:76:5c:42:cc:b3:12:fc:09:05:
7a:79:03:a8:c2:8f:d0:53:cc:be:8a:5b:64:f6:3a:
c1:5b:61:b6:6d:5c:fc:a1:93:2e:8e:73:7e:f7:38:
01:e6:08:79:2e:e6:73:e4:70:ae:57:1c:82:18:b5:
f5:17:05:1e:ad:0c:c0:e2:bd:1d:d8:35:64:5e:c8:
c4:c5:f7:30:5d:e3:86:b7:d0:50:0f:9d:0e:55:54:
94:12:a1:14:02:22:d9:44:f2:4a:1f:bc:5c:53:9c:
5e:33:78:fa:1f:2e:4a:ef:bf:93:93:e2:93:e6:11:
c4:d5:ee:3a:89:9a:22:4f:a5:2a:14:af:6e:e5:18:
20:c0:e5:ef:0d:2a:55:00:03:79:5c:48:f7:c9:9c:
e3:1f:27:66:c5:cf:84:22:d5:b6:ee:25:9d:89:a4:
bd:8a:9f:a5:1a:87:69:df:91:fa:54:5d:f1:8b:b7:
82:93:5b:0a:f5:ae:da:6d:34:ee:1b:14:d4:d3:c1:
cb:05:5b:78:04:94:81:c5:9b:81:ce:8f:ee:6d:d4:
39:38:d9:1b:01:67:7e:df:fd:33:4b:d8:a4:b7:4c:
30:20:6f:4f:65:3d:d1:84:dd:89:25:73:95:a1:0d:
9a:2c:37:71:a4:f7:6d:dd:4c:f7:a8:a0:27:80:e4:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ef:ee:6a:ac:5f:ec:f7:a3:18:d5:fa:fc:51:e8:4d:5c:46:
36:fd:f5:27:63:6b:03:cd:a6:7b:2d:3b:03:70:63:99:72:85:
cd:db:2f:8b:00:4d:7b:c7:dd:59:4f:a5:d6:b1:7e:d0:60:e4:
aa:14:c6:cb:d0:56:2e:46:4a:1b:66:77:87:71:a6:3b:11:b7:
9d:4c:89:bd:c9:36:c7:57:82:46:d9:5a:2a:76:96:37:c4:39:
03:d1:7f:a3:ff:6b:b6:91:30:93:98:75:a1:84:3d:3f:19:79:
c5:3c:08:dd:37:12:6f:46:89:c9:9a:76:60:8c:59:d0:1b:98:
50:2f:d4:47:20:a2:95:de:35:46:8d:89:4e:a7:3a:45:b5:ed:
f8:ff:cf:6b:1b:bf:ba:67:69:2f:a2:54:aa:59:38:8f:df:72:
85:29:8a:cb:e6:3f:6d:b5:c9:a5:5b:09:30:aa:b4:75:02:5b:
a6:d5:63:88:b0:8a:8b:31:4c:a8:8a:85:5d:61:71:bb:a5:2d:
ba:af:6f:59:07:77:44:57:01:2c:0c:ce:b4:2a:6a:e7:15:58:
c5:4a:1c:f1:b2:38:b0:77:3c:b2:2f:46:53:85:7e:7d:f5:09:
e5:e8:88:09:05:5f:a8:b8:69:c9:4c:36:bd:a3:c4:d5:37:c3:
ac:e0:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:12 2025 by rpki-client