Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
File: LycJyzmcThaMy9oW2xNrW8i5bdY.cer (raw, json)
Hash identifier: Sv4mmce/MYdVlMHrtVsOpkBc+WJcvud3cc0cjiSP2XA=
Subject key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC10327EAE6E7B76224913AF4DCC4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.237.236.0/22
IP: 2001:67c:2b7c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:10:32:7e:ae:6e:7b:76:22:49:13:af:4d:cc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:64:f0:07:31:65:36:bd:fa:2e:70:b1:0f:
55:8d:dc:04:c4:c6:55:45:ee:8f:6f:4c:cb:df:f6:
08:3f:a2:39:e4:33:51:9a:2c:04:5b:8f:fa:5a:43:
91:06:f2:8c:5d:d9:23:4d:e2:a6:0c:99:65:e3:2c:
a9:a9:ba:5e:e1:a0:77:c1:4d:bd:fa:fb:c0:f9:25:
e6:de:9c:b2:5e:a3:1e:18:26:a0:53:db:47:8a:a8:
64:68:94:4a:ad:7a:dd:bc:59:3a:82:bf:87:f2:fe:
8b:97:b6:e4:e1:ba:c6:5a:46:12:3a:d9:ea:a7:19:
e7:21:96:f2:4a:31:89:46:51:fb:7d:21:71:36:97:
cf:e0:6c:53:b2:f9:49:ab:82:20:0e:e2:f6:3d:6b:
38:44:a3:96:d4:40:35:c2:34:eb:a5:80:10:76:74:
98:50:9f:4a:68:62:94:80:4c:e1:65:cd:55:70:8f:
79:16:40:ab:c1:9f:c3:99:59:f5:5b:c2:c4:fe:07:
48:31:ea:ec:9e:29:98:fa:66:f1:07:47:e0:d7:e0:
67:c3:38:9b:7c:7a:12:85:b0:38:46:dc:15:13:0f:
a3:83:8d:d1:e9:44:36:82:f5:c6:af:31:b2:05:30:
42:24:6f:7a:69:16:48:e3:0a:8d:68:e2:44:17:aa:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
IPv6:
2001:67c:2b7c::/48
Signature Algorithm: sha256WithRSAEncryption
12:be:59:27:06:94:ae:48:03:9f:2b:d3:b2:14:46:5d:54:8c:
a0:a1:73:09:6a:9a:1f:4c:90:cf:a8:29:6f:99:17:0b:9e:1a:
65:0d:86:e4:40:e1:4e:2b:b9:c8:ba:86:a7:f6:77:89:f8:e1:
2d:e7:fe:f7:8b:3e:3d:01:23:d3:6d:ff:51:d1:31:df:c2:e3:
00:b0:b0:82:8d:47:b2:aa:75:cf:50:b3:48:03:02:c6:00:42:
56:33:07:5d:22:02:5e:36:13:57:4c:44:33:0b:d4:86:98:9e:
c4:7d:de:14:05:8b:3b:5b:2d:17:2c:7b:4f:7a:ee:13:cd:9d:
95:6d:24:be:2d:a5:ea:3c:01:d9:25:e1:64:9c:40:a0:7d:de:
7d:04:d1:ff:e7:38:2b:27:81:d0:15:18:c7:ed:1a:ee:5c:4a:
c9:68:c4:ae:ab:14:43:ac:34:41:ce:5a:eb:03:47:5b:03:79:
7b:16:e9:dd:91:b2:3a:ac:23:24:f3:fc:68:7f:99:f1:40:68:
3f:6b:f2:fa:f0:d8:77:77:79:50:98:83:1f:ff:dd:cd:db:f0:
78:13:45:2e:e5:a4:a4:9a:92:4f:60:08:3c:d3:9d:5b:4a:d7:
c4:f0:1a:1e:93:1f:96:51:91:72:18:1f:eb:4f:e7:29:e2:3b:
ef:ea:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:00 2025 by rpki-client