Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
File: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer (raw, json)
Hash identifier: pvNBb55tGIPo1UNslA/JIzq7MmJl2UH5fK1MYshE7BU=
Subject key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC5ABC61650341DBDBAF59ECF805A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.206.132.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:ab:c6:16:50:34:1d:bd:ba:f5:9e:cf:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:09:95:ab:18:70:f9:4b:6b:cf:7b:1e:29:
86:1c:54:89:e7:09:2d:f3:36:61:26:bb:d0:42:5f:
0c:27:73:2e:73:87:e4:1e:b3:cb:25:0a:c0:51:5f:
6f:57:72:90:62:39:b4:d4:d2:30:57:11:0d:54:f8:
32:89:d1:c9:3f:48:cf:e1:49:fc:39:e6:69:05:51:
49:6b:9b:08:77:41:45:e8:7a:e7:9a:ab:c4:82:85:
f4:85:e4:1a:8d:a5:6b:5a:c7:e2:15:af:e1:66:78:
78:ae:54:d1:0c:a9:5d:3d:65:1b:bc:5d:82:4c:90:
2d:d5:54:f7:f5:5a:c2:69:9d:20:ce:f6:87:78:a0:
74:f2:28:ce:ce:bf:49:27:29:bb:51:34:13:fd:cd:
6a:ea:29:1a:3a:84:2c:b1:42:c9:b7:6e:96:30:8e:
3e:b8:f7:3e:dc:f2:9a:c3:64:96:df:ef:7c:83:d4:
8e:5c:ad:a5:e7:18:4e:71:99:94:d3:8c:f2:c1:cd:
02:19:68:42:fc:0a:83:43:2e:39:f0:18:37:e8:0e:
0d:02:21:f4:8b:82:1a:83:e3:ca:1b:6b:b2:25:ac:
ce:27:31:2f:30:5a:38:f0:c7:ef:3e:cc:02:f0:48:
b8:4c:9f:35:5f:03:2a:cf:b9:1d:7a:fe:7f:b0:4c:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.132.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:44:6e:54:5b:2a:96:eb:07:08:0a:cb:b4:a7:07:3b:dd:46:
fa:3f:c4:0d:c9:ed:29:03:6d:ba:47:16:e3:0e:db:a3:bd:4c:
c2:79:eb:9a:e3:77:3f:6c:a7:cc:d0:dd:3f:f9:0e:63:58:ad:
5a:85:7c:7e:1c:b0:55:d6:6a:ae:7a:78:60:f4:68:78:5e:a6:
3f:64:b4:bd:59:b1:4e:1b:7b:00:25:bf:db:da:ba:06:b3:a4:
d2:9f:6f:26:96:ac:8a:5b:c9:7a:0a:1b:17:d2:13:05:f6:29:
3c:24:95:9e:8f:27:19:93:99:72:fe:db:1d:02:ca:2b:76:3e:
9f:b2:fb:12:d3:ca:49:0b:84:81:21:75:ed:e1:ec:18:ba:97:
71:09:43:4f:7c:b3:80:6e:f0:78:f9:03:1b:fd:b1:59:05:69:
9d:bf:6a:ef:f4:e7:36:44:75:cd:94:ce:e1:64:0e:1d:a0:8f:
41:8c:0a:10:5e:d7:87:cb:fc:55:96:3c:c6:67:39:05:8d:3d:
cc:8c:6b:0e:26:15:65:14:c1:60:3a:c9:22:08:b1:55:0e:17:
95:d1:8b:16:47:2e:04:84:0f:c0:e3:fc:13:78:fd:86:7b:98:
fa:d4:c5:07:b2:ca:4d:36:72:b4:2f:77:08:5a:0c:94:00:7a:
5b:07:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:25 2025 by rpki-client