Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer (raw, json)
Hash identifier: 0sY660Te7GtTx4JNN94bxd0+ps27riGWae4v5FWGXs4=
Subject key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D607D70E49E604638117AD8CFDAC06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.237.117.0/24
IP: 2001:67c:28e0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:07:d7:0e:49:e6:04:63:81:17:ad:8c:fd:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:65:c3:ce:73:1f:ee:a6:cc:0b:24:21:48:
7f:79:11:16:09:07:d8:f6:f7:c6:70:ce:3b:95:27:
2c:cf:df:16:75:06:0b:18:e6:9c:da:dc:fd:13:41:
f9:0d:08:07:31:1f:91:c0:45:ec:bb:fd:dd:1c:e6:
76:a7:a2:8b:05:9b:e4:9d:65:07:7b:f5:12:2c:ef:
f3:df:c3:f1:e1:a4:99:b9:ca:26:3f:44:48:c8:fe:
5d:62:19:c1:a0:0b:27:40:3d:72:ba:cf:1d:cc:9f:
e7:61:9e:2f:c7:9a:86:b8:5e:4d:65:04:07:bb:a1:
00:58:08:15:98:5b:6f:f1:a5:39:78:e8:b1:63:8b:
ef:ef:3e:43:21:c5:dd:49:ad:e8:77:32:0a:a1:1e:
c2:39:bf:55:7f:8c:fd:5c:48:7c:0f:31:28:66:9c:
3b:59:bd:2b:4b:31:9e:94:82:f8:46:43:c1:c3:5b:
6a:48:f9:c4:ea:d1:25:8f:a2:c7:f7:28:5d:55:7c:
6f:de:30:b2:f0:c6:29:eb:c6:e9:0a:ed:af:4e:ed:
4e:b7:cd:7d:95:d5:17:f0:fc:87:fe:92:90:6f:89:
dd:17:da:2c:53:08:d4:00:bc:28:78:ad:3f:18:25:
e5:2a:0c:db:58:df:eb:1d:32:05:b4:8e:41:53:53:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.117.0/24
IPv6:
2001:67c:28e0::/48
Signature Algorithm: sha256WithRSAEncryption
76:71:4c:cb:8f:39:26:2c:18:3f:a8:83:fe:bc:cc:d9:45:ae:
5e:13:ac:6a:44:7d:3b:fa:62:5a:6c:48:c3:0d:66:ac:a1:b5:
83:a7:65:bc:93:ef:7c:75:16:b6:cd:e8:b0:43:1c:1f:16:7a:
01:1a:e1:37:d8:41:d2:10:78:07:5b:49:c7:e7:6c:75:26:ce:
94:4a:91:49:3f:56:a0:7f:00:31:6d:8b:c0:1e:a2:45:2c:4f:
83:e4:5c:b4:9a:70:04:3b:66:b6:7b:e0:aa:31:4f:07:6e:7f:
32:c3:86:da:03:02:b6:df:24:94:68:cc:6c:76:6c:92:3b:a3:
f4:8b:c1:fc:13:74:1c:41:f9:da:33:24:d4:08:88:d6:ff:2c:
d6:e3:40:fa:a9:da:78:1f:e6:cf:cd:65:82:e1:6e:16:fe:b5:
62:99:e2:30:9a:e3:ea:88:50:ef:e9:86:b7:68:d2:31:e4:6c:
b7:f9:51:dd:41:2f:0b:95:ef:e8:71:b5:a3:9e:c4:77:46:69:
79:d6:0f:31:62:99:a6:17:dd:8f:89:28:a9:14:f7:5c:c0:c3:
d0:e6:64:0b:f4:68:93:30:42:7c:8a:d3:9a:45:5d:dc:8e:da:
10:00:3c:79:1e:fa:b0:e9:47:c7:04:3d:e3:c0:72:cd:11:2b:
44:66:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:07 2025 by rpki-client