Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.cer (raw, json)
Hash identifier: Nw2icH/4Z59aGuorOp5bkztGmwUnHdfWeDWVueOkpDM=
Subject key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EAE799649E3771A31ACA886377DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.228.10.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ea:e7:99:64:9e:37:71:a3:1a:ca:88:63:77:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:9f:03:3d:22:5e:bf:0e:08:54:13:dd:61:
61:88:46:d5:4d:af:68:09:dc:7e:da:f4:04:4f:b8:
1b:5d:ea:a2:7b:ab:a0:e2:be:2c:a9:3e:9c:91:57:
f8:bd:14:41:05:3f:ab:21:bb:65:e1:1d:4c:58:d7:
10:1f:4f:bd:4a:f5:94:5d:74:16:6b:9e:66:7f:75:
0c:32:3f:8d:7a:6a:d2:60:2e:87:73:e6:78:3a:62:
31:1f:b9:f4:ab:d1:e1:6d:1e:41:50:1b:39:8d:d7:
06:3b:8d:5f:e0:c3:09:9b:a5:f3:96:45:be:5d:9e:
81:2c:a5:14:1c:fb:e3:d3:c0:7b:04:b7:14:ac:33:
0e:f4:7c:d4:dd:3c:78:e0:0e:99:08:a2:48:24:15:
3b:80:fe:8f:b4:36:4b:29:0d:b4:2e:f0:3d:bb:87:
fc:ed:98:f8:58:3d:be:94:5f:b9:92:ed:ee:30:11:
c8:8e:b0:74:f4:25:6c:8f:72:4f:b8:eb:bf:23:de:
10:9d:95:29:c0:2f:bd:ae:6c:69:ca:8c:5f:61:c7:
0b:bf:73:36:be:c9:c8:df:4f:a1:16:34:a2:aa:d7:
2b:84:8c:09:22:2c:e2:98:4e:78:97:45:c0:3a:16:
5f:4b:8a:37:40:11:61:46:28:08:57:a8:f0:50:c9:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c8:80:1f:f1:d5:9b:5f:47:2b:8d:04:a9:3d:b6:d5:1b:e5:
15:b1:47:2d:1c:2f:19:71:80:21:06:f5:0a:b2:3c:fc:db:a9:
c1:60:21:bd:8d:01:d4:7b:6a:b3:84:df:3f:38:61:42:e8:3d:
b4:58:e9:2a:28:33:44:e5:b0:43:63:38:64:d7:a2:6e:1e:70:
05:0a:d0:8b:e3:93:ea:22:1b:ac:0f:dc:91:6c:6b:fb:e3:78:
06:f3:0a:0f:b0:92:76:0c:12:e9:2e:41:21:89:00:f5:1d:4b:
45:2b:b7:95:00:2a:72:d1:69:8c:8a:da:e6:30:63:43:65:e4:
29:59:10:38:c5:37:48:87:80:39:88:6d:c1:6b:63:94:87:e1:
f3:c3:fc:be:80:a9:74:bd:41:62:c2:48:3a:0b:e8:21:97:ba:
97:42:a2:5c:29:64:0c:ef:da:07:fd:20:0a:86:d8:b9:9c:54:
8b:35:c7:d0:41:48:ea:53:7b:28:bb:41:f0:2d:b9:2e:fd:2f:
ec:78:2d:5c:56:ae:c7:58:bb:1d:db:22:24:fb:ea:69:56:a8:
a4:75:e3:8c:14:f6:ef:5a:97:50:14:13:61:69:3f:99:e4:4d:
e2:e0:fc:88:81:ef:5d:51:38:0a:1c:4b:fe:bf:ec:70:15:26:
58:f9:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:16 2025 by rpki-client