Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
File: LkJv6Qhstq8B85H_T2nACDZNbu0.cer (raw, json)
Hash identifier: uXknmGNKmKiDq5f+Q1JiIbIwG+yinPUGmgi9QrzFqoQ=
Subject key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F58BDAB08D677E2EA33BC453E3C43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.145.247.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:58:bd:ab:08:d6:77:e2:ea:33:bc:45:3e:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:53:5a:c8:4a:cf:ba:3b:71:8a:4a:4e:e0:
19:55:da:d3:0f:89:01:6a:3f:45:a9:75:83:1c:70:
89:71:57:e5:ad:26:b4:fd:c8:0c:e6:d1:76:fb:ce:
4e:bf:81:08:61:dc:26:fd:6a:f1:f9:fb:98:c7:15:
4b:59:8a:9d:5c:50:0c:0a:04:5b:5e:6c:b9:54:30:
20:b9:83:0f:18:0a:22:97:f1:14:39:00:45:41:b5:
74:f6:c6:07:31:d0:15:23:92:fc:ea:bb:b4:d4:a5:
ae:90:34:83:05:df:59:bf:84:f9:e3:85:c1:24:4a:
1d:f5:5f:fc:a0:d3:b8:df:cc:45:70:4a:6a:81:8b:
1f:b6:a5:87:47:57:15:0a:f6:1f:be:5d:a3:56:e3:
cc:27:69:f4:d9:17:a1:46:64:81:72:8a:2f:fe:01:
28:7c:5b:d3:96:49:b2:1d:51:b9:e6:97:56:9f:ce:
39:60:f0:65:0e:e6:16:40:e3:44:31:c4:24:d8:07:
15:a9:18:5d:20:b9:88:16:f4:8c:d3:8f:74:f9:58:
d2:14:d4:b7:59:63:af:bd:7a:a4:78:d4:6b:9e:22:
ca:7f:26:69:b7:98:a5:36:79:0f:3b:83:25:4d:d2:
97:5b:72:32:5d:35:19:ca:e3:3e:75:b0:81:30:50:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d8:b3:91:50:ef:a5:a8:30:8b:07:07:c0:cf:85:d3:8c:8b:
52:12:56:13:af:38:27:7f:b7:6e:e0:44:c5:4e:68:1c:c3:33:
f6:8f:bc:8f:7a:a6:dc:3a:b7:83:25:b7:78:bd:09:84:5d:e4:
06:4a:2d:6d:96:5f:68:f1:46:b9:c1:ce:23:e9:69:84:4d:f8:
b2:d0:2a:aa:98:26:43:21:d9:9b:54:5c:fd:df:00:a1:36:1a:
9b:e0:e8:f0:a2:6b:43:68:87:ce:0d:f1:34:d8:69:b1:1c:1d:
95:73:54:d6:65:43:71:1b:9e:0d:0c:94:0f:70:11:8d:9b:70:
92:2c:74:8e:1a:fe:e6:b1:70:4e:05:84:38:d0:62:c0:85:0f:
c7:cb:88:ee:b4:2e:ba:0e:5c:62:4a:ea:35:fb:68:c5:31:38:
b9:a6:6a:d4:0d:0d:7c:30:d8:56:af:83:85:e0:08:a9:2a:4f:
07:07:9e:d8:36:71:db:06:ed:8a:5b:d2:de:b8:50:77:3a:fa:
c3:76:d9:af:99:2f:02:6a:78:66:5a:62:e4:92:ab:45:3d:6f:
66:4f:ab:e1:99:d1:06:16:a4:de:60:04:11:af:2e:65:f9:df:
24:20:ea:ba:f5:31:a3:05:a4:3e:f2:da:ef:82:63:3c:fe:8a:
fd:3c:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:02 2025 by rpki-client