Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
File: Rzmd24xw_jNP6cKHtpJpRihRjGk.cer (raw, json)
Hash identifier: lRGJ1ks21ytRHon4vxLFrYWXD2YXUQHdmbrXBbJXl6A=
Subject key identifier: 47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1D2DC30E7F0C3FFBD87C18F3B32B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.214.235.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d2:dc:30:e7:f0:c3:ff:bd:87:c1:8f:3b:32:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47399ddb8c70fe334fe9c287b692694628518c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:ec:92:d5:fb:8f:86:98:f9:05:88:22:25:
a6:cf:27:e1:3c:dd:40:e8:5a:c9:ff:c1:42:b3:ef:
50:02:79:37:3e:0c:8c:9d:ac:04:64:1b:f9:f3:95:
0f:02:22:31:be:ce:72:05:59:fa:a6:b5:40:fd:42:
9a:08:a7:4f:a5:c3:4a:4f:d6:3a:aa:85:02:a0:5e:
42:35:77:80:21:d8:f1:f0:e7:10:ae:d3:75:f9:05:
3f:c6:70:5e:46:d9:29:aa:96:dc:d8:85:a4:a1:68:
2f:f9:56:e1:a3:76:1b:2d:7b:73:c4:86:65:23:43:
8a:c7:25:0f:37:8c:88:29:89:c8:f1:c6:81:74:62:
b3:98:7b:8e:76:71:a7:8c:59:82:63:4c:60:f8:6d:
bf:01:6a:6e:d9:e3:4f:71:79:80:b5:e9:87:42:79:
91:19:aa:00:0e:49:75:1a:59:96:71:ad:7e:7c:ae:
8e:a8:fe:4a:85:a7:41:81:dc:ca:cb:4d:f0:3b:81:
e8:a7:d4:0c:58:b5:c2:38:47:a4:55:e1:a5:b5:63:
15:c4:7a:3b:4b:3c:dc:74:bf:f9:a6:e2:fa:fd:4a:
81:25:85:33:4d:9b:63:b5:ea:1b:90:90:8f:7e:8b:
9f:1f:77:39:c9:04:25:47:0d:3a:84:37:0d:b9:72:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:40:83:7c:17:7e:82:2f:b6:47:a4:c9:bf:52:dc:7c:09:21:
31:08:d6:4c:f1:4d:3b:7c:6a:87:5c:03:9d:3f:1e:25:43:f1:
cd:91:96:01:40:c7:4d:72:3e:0a:96:93:e1:fe:97:d7:d9:29:
5c:28:1b:69:17:4b:df:cf:86:2d:c1:5e:5e:a2:11:26:a2:bc:
58:85:b6:c0:0e:7e:8d:43:78:0e:c2:01:9f:c9:3b:8b:bf:a5:
96:ef:4c:12:18:87:b0:99:4c:d5:4a:12:24:1f:3e:75:39:20:
47:a5:db:be:f3:10:bf:70:8e:da:bd:bb:33:d7:46:f9:34:23:
3a:74:4e:ed:18:e8:4b:bb:52:1a:c5:7e:9b:85:3f:ab:ec:c5:
f6:72:fd:4a:71:75:7b:cd:10:07:0f:b3:f7:99:51:52:ff:40:
0c:27:9c:59:e9:a3:12:55:5a:10:81:dc:82:34:b1:00:42:17:
1c:52:ef:2c:32:18:5f:e5:1e:f8:93:a7:d7:11:b3:5b:2d:d0:
f4:a8:77:6c:ec:67:65:91:f3:c0:9a:c7:33:e4:5b:e4:60:1c:
28:86:ee:17:a4:34:ca:23:f5:d0:2d:c8:fa:c4:54:4a:cc:80:
16:82:95:16:91:1c:04:52:17:ad:13:f6:b3:06:1b:79:54:66:
68:ad:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:10 2025 by rpki-client