Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer (raw, json)
Hash identifier: 3Mk5Y8lWhgaBxQ7+5ZB5zIrDJJptR6mobG2BxeO6xjg=
Subject key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B7D5DAED1E36D668B529ADD341DDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.83.168.0/22
IP: 2a05:9d00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7d:5d:ae:d1:e3:6d:66:8b:52:9a:dd:34:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:6b:5e:86:d0:34:4c:4e:c0:2f:8c:cc:65:
c4:62:75:35:90:1b:e1:fa:8c:94:0d:e8:0f:98:05:
19:d9:10:ee:82:fb:88:ce:cc:68:3a:3e:f2:69:dd:
7b:85:4d:6c:57:00:4c:cf:8b:ef:b5:ae:75:50:54:
e6:7a:58:76:8c:3d:98:b2:7a:41:ed:a8:af:88:c7:
0b:eb:53:22:33:2c:b8:3e:97:50:f6:5a:7b:72:6f:
86:47:74:0b:50:32:1a:9c:c5:44:5d:dd:ec:75:34:
23:87:d0:e7:b5:22:57:5e:b5:d5:f2:68:48:7b:1d:
44:8d:27:d0:c8:99:2a:58:7f:30:5c:43:45:0c:a2:
84:55:de:9b:1c:d1:b4:3d:42:44:ed:3e:16:a6:16:
0f:ee:b5:17:25:0b:1e:de:e0:bb:46:07:01:82:a1:
80:83:ea:60:db:5b:52:6d:ae:b7:27:6c:96:09:9f:
4d:a5:76:90:45:e2:f5:72:07:3e:23:90:d0:5d:3b:
fc:4a:66:82:d1:8e:d8:c3:12:36:43:6f:1c:ed:9b:
c2:f3:38:97:65:ea:ad:35:8f:eb:cb:b8:4b:19:ba:
36:71:e9:79:50:cc:c0:ec:a8:52:0a:3f:e5:74:cf:
98:20:c8:30:3f:fc:c4:65:06:36:99:21:1f:3c:42:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.168.0/22
IPv6:
2a05:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
a4:b5:92:e1:11:b7:1f:49:08:bd:b2:00:59:80:b1:f9:93:50:
60:82:90:3b:a0:f6:a1:97:ca:8e:e8:b4:c9:69:66:af:03:94:
99:51:3d:b0:88:d0:ad:73:21:e0:f1:17:a8:b6:c8:66:15:fa:
9b:e3:c6:96:60:0c:31:a2:97:e4:fc:1c:e6:92:9c:4c:c2:d4:
91:a2:30:34:be:3c:25:35:2b:36:80:43:e2:b7:43:fe:9b:02:
d0:5d:70:34:cb:e6:84:d4:ad:4c:9a:e8:ea:f1:54:60:48:78:
a6:46:b3:9c:b8:6d:41:78:f1:e3:77:07:64:56:4a:ed:9c:37:
99:16:12:ac:a4:03:a1:37:2e:90:0b:9a:70:8d:3b:86:b5:dc:
86:e5:a2:39:8a:d8:2c:0c:c7:85:7d:75:2f:67:0c:f5:67:6b:
d1:3e:c0:a2:f0:79:10:99:08:dd:c0:a6:ed:c1:e8:1d:c0:0e:
50:25:ad:62:9b:9d:11:21:93:43:aa:a8:5d:09:cb:2d:a5:54:
17:d0:e0:db:8b:6f:96:a2:ba:b0:e0:4c:0b:c3:77:20:bf:6c:
2c:d4:8f:f3:43:49:39:31:fb:1f:a0:ea:2d:74:a7:c9:a3:b8:
3a:82:09:d6:e0:6a:8b:e7:1d:6d:f8:0a:ef:44:22:b1:f7:70:
ba:a4:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:31 2025 by rpki-client