Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
File: LWX13HhD9bdmifNquRag2ZS5l5w.cer (raw, json)
Hash identifier: +3zI+5xX4DwFU5QvN5+oMfilkB7291hJsW8c1ifFkOk=
Subject key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FB92A5E79EEB7BB5C496C2002BAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.105.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fb:92:a5:e7:9e:eb:7b:b5:c4:96:c2:00:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:3a:8a:0c:b8:16:8c:89:81:5d:da:4b:8b:
31:dd:eb:81:de:7d:a0:e9:d2:ee:d6:52:04:9b:89:
05:09:81:9c:8e:31:b5:bc:54:f7:3e:bf:27:c8:53:
4a:95:38:7b:4e:8a:6d:32:55:f3:b4:ed:a6:f7:e5:
a0:55:47:b2:88:0d:34:5c:36:96:9d:97:ea:9a:d0:
b4:82:04:43:d8:08:24:92:e7:7a:f6:a1:d7:60:e3:
ac:37:53:e7:ea:5c:cc:b9:de:65:91:17:ff:fb:e8:
2e:b0:8d:a5:f5:24:ba:97:13:4c:30:b9:d6:25:7c:
73:c9:84:1f:4d:3e:76:12:bb:f0:72:81:59:00:b0:
dd:3b:2f:de:9b:f1:e3:10:f6:d1:be:21:78:8c:ed:
6c:5a:7a:81:09:7c:9d:40:44:ec:6b:cd:d9:22:e1:
80:ce:45:4a:73:06:79:ed:b6:2d:de:5e:44:61:2f:
fc:d8:8d:c0:33:99:f8:f5:a9:85:68:b0:d1:c2:6b:
6a:b6:47:ac:77:98:c2:b1:47:15:f2:f7:61:8b:94:
a2:6e:9b:9f:19:95:3a:78:17:72:42:8e:62:0a:41:
a3:0f:3e:ec:e1:f3:60:4f:e5:f8:56:ea:3c:d3:b3:
a5:18:36:2f:69:ed:bc:c7:8d:7f:e3:61:9c:4d:52:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.105.0/24
Signature Algorithm: sha256WithRSAEncryption
07:51:83:cb:93:62:64:b8:b9:c2:84:3a:36:fa:03:c2:45:9f:
3e:b3:33:d8:f5:9d:1b:89:24:be:7e:1b:8a:f3:46:53:fc:31:
27:68:ac:80:11:c0:2a:a4:ee:55:ee:02:37:e5:e0:07:f1:70:
7e:43:4f:81:4c:96:39:4f:ae:79:8e:ab:49:47:20:92:6b:32:
29:8f:7a:08:be:c5:1e:f4:26:59:60:48:e1:af:7e:a3:88:d5:
da:88:25:5d:14:9e:53:f3:cc:a6:93:e9:08:25:10:70:68:af:
19:41:02:eb:c3:60:ad:68:18:2a:f7:1c:a1:b8:bf:a0:4a:d7:
88:4e:4d:26:08:ba:b2:79:0c:19:36:6e:68:f5:e7:97:84:6d:
f8:e8:19:de:ba:bd:cb:31:80:a7:d1:d6:dc:c7:53:de:c0:ad:
c8:7a:79:cc:75:38:a2:09:af:61:20:9d:1f:38:07:a5:67:03:
85:72:dc:93:86:46:0c:23:78:b0:86:bb:10:e2:7d:9d:d1:7c:
11:b9:15:41:8c:bf:79:de:05:23:c1:c4:11:e9:78:88:68:ad:
59:bf:65:de:67:99:bb:27:80:8a:c7:92:a8:4c:4a:98:e3:11:
87:47:3d:cf:31:01:34:a9:b1:c5:45:3d:04:b6:aa:7e:84:a6:
ee:58:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:32 2025 by rpki-client