Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer (raw, json)
Hash identifier: Xf5AmCJNmz6w29luYdnvCm1KL1Fa83bEhgsoP5qga48=
Subject key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DC9D0CD10E5D25F375D12783CFA29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.193.25.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c9:d0:cd:10:e5:d2:5f:37:5d:12:78:3c:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:3b:b3:3a:11:5b:56:aa:25:b7:00:f1:0e:
9a:c4:65:5b:7c:38:1f:66:ba:b0:37:be:dc:7b:09:
01:e9:45:34:5c:03:91:e2:cf:d4:c0:2f:5d:da:e5:
17:c2:d1:10:8d:12:85:94:4a:b7:73:fb:e1:13:63:
9b:c8:af:eb:d0:e5:e2:b4:c9:7e:40:a4:7a:ea:d5:
bd:b7:34:b1:ac:75:7a:95:58:2e:25:0a:db:66:cb:
36:1a:4c:a2:25:56:16:24:2d:da:35:c0:f7:6b:14:
49:81:34:cc:91:6b:e3:0f:ad:6e:13:c8:55:85:5f:
1f:58:a4:35:4d:2f:7a:15:f3:3e:d6:0b:49:f4:8e:
e6:a6:3c:c1:e8:d0:3d:51:4d:40:fc:b8:3c:c7:45:
f9:31:1f:05:74:eb:61:f8:df:19:27:65:21:c5:a4:
f2:2d:78:4c:e1:ab:81:47:6f:66:54:f2:22:56:24:
35:37:22:e2:63:73:d1:82:4e:ea:3a:f1:37:c4:25:
e0:5d:cc:fc:1a:55:26:71:4f:f5:db:65:11:07:ff:
b7:26:f8:80:81:62:67:7f:f5:31:3b:7d:5e:55:50:
4c:26:d9:cb:b5:14:0f:91:a6:d4:3d:39:68:dd:65:
fd:38:9e:c1:36:7e:6e:0f:2e:f5:c0:35:76:31:dc:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7d:a8:72:f4:1a:fb:3c:fc:35:93:d5:79:76:99:af:75:bf:
a4:a5:83:63:dd:d1:48:87:b7:3a:a8:88:e3:55:2a:fd:08:a5:
4f:4d:44:67:d6:0a:cf:21:7a:70:c3:2f:ee:d8:24:ca:bd:a3:
86:84:93:24:22:d7:5d:e5:7f:74:45:23:07:6e:e6:75:b3:8a:
a1:3b:6e:86:6f:c8:cb:6f:40:85:76:a5:ac:cb:e1:cf:67:f9:
59:94:95:e9:c6:b9:e1:a1:94:e1:ce:26:57:13:d7:30:d8:65:
49:df:8a:ea:9c:a7:30:07:5c:93:36:d3:6e:91:8e:95:59:90:
4f:11:9f:a4:91:5c:3c:3b:f0:45:13:52:d8:84:8a:08:74:dc:
f3:41:7d:94:89:39:17:cf:2a:3a:ce:c1:60:c5:48:19:0b:6a:
5b:0f:51:45:e0:ce:40:00:6f:d2:6f:1f:80:4f:2e:2a:7d:9c:
85:09:75:84:61:fd:aa:d9:e0:3c:ad:95:47:d7:08:89:ed:2e:
ea:68:47:86:7c:a7:dc:ac:35:1b:9e:27:cd:20:66:1b:96:8f:
21:9e:a3:59:ef:43:7e:6a:d1:ed:7e:de:4b:54:3d:5a:f1:99:
91:c9:fa:dd:69:13:68:43:a7:d6:ab:d4:7c:e1:83:3d:86:d6:
50:6e:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:32 2025 by rpki-client