Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
File: Tl67mwUa1ex6Npifw_zJTByrzHQ.cer (raw, json)
Hash identifier: y4KI5/c0sDB8LI6SOwyYpaxnKzVQjziNwKah6cJDJJo=
Subject key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F7B8939E829CCAAED5274AEFDA1D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.254.24.0/22
IP: 80.251.144.0/21
IP: 80.251.154.0/24
IP: 89.249.48.0/24
IP: 93.159.216.0/22
IP: 2a0a:3040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7b:89:39:e8:29:cc:aa:ed:52:74:ae:fd:a1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:4e:c9:8e:f6:78:c4:cd:57:8f:0a:3b:be:
69:46:de:76:66:a0:78:ab:71:f5:1d:a6:24:af:62:
16:66:8b:c1:52:d1:89:3b:98:fc:1e:9b:4c:3c:24:
42:e5:f2:61:e6:bd:ba:78:d9:67:87:2a:d7:a7:bd:
c7:6a:bb:92:f8:4b:b5:ba:1f:8c:c1:45:8a:57:d6:
96:ac:7b:cd:c7:20:d4:e8:0a:42:e6:eb:3a:09:40:
07:81:48:35:86:22:86:f5:ea:5e:0c:a4:c0:86:e7:
94:38:c1:a1:75:eb:7f:37:8d:7f:44:ad:b9:09:13:
ed:51:05:ba:3f:dd:c3:36:ea:4b:ab:15:bb:ea:a0:
47:94:99:df:83:39:e1:e6:8a:4b:ea:00:80:42:97:
b9:f3:14:ff:8d:16:7b:87:23:a7:99:97:23:32:6c:
70:f3:9c:7b:09:c1:cd:cb:d7:14:17:ae:67:5d:1e:
1b:22:52:39:5c:17:af:cd:26:9e:5b:fa:ab:90:43:
7c:e9:d7:72:b2:98:70:17:dc:d5:54:9f:2d:50:79:
80:4e:b4:30:22:09:8b:0f:2f:65:9e:c8:c6:1d:61:
fb:be:6c:c3:26:ac:3b:59:1a:52:cc:67:88:c6:ec:
e1:25:26:8f:0f:56:16:a5:17:5d:e0:4e:22:a3:81:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
89.249.48.0/24
93.159.216.0/22
IPv6:
2a0a:3040::/29
Signature Algorithm: sha256WithRSAEncryption
97:5a:68:98:7a:38:36:bf:05:37:96:b5:8e:1c:86:d2:37:98:
39:0c:a2:96:41:f5:a0:41:d8:2b:b4:a0:70:3b:ed:f2:9d:ca:
15:c7:38:64:0f:19:2c:32:bf:33:96:f4:d6:54:3c:cf:9d:b7:
a6:61:e6:76:53:e5:00:ca:b7:5b:95:3a:52:a0:59:cf:cb:a8:
4e:df:9d:2d:80:bb:a4:3f:b6:59:39:df:4e:e7:d8:bd:22:4e:
a0:7d:0a:40:00:53:1b:66:43:30:15:cf:1e:09:bb:aa:27:75:
ab:00:58:b9:02:8b:e7:2a:b0:bf:fa:39:48:14:1a:1a:c7:b0:
fb:6b:95:22:d2:75:f6:72:f6:38:ad:ee:9e:63:86:aa:2a:0c:
0b:70:6f:fb:2f:6c:73:d4:8c:e2:09:5f:8d:50:05:71:d0:27:
99:65:5e:f5:b2:4a:07:f9:02:6b:21:b4:94:e2:db:2d:f2:01:
45:55:b0:31:2a:ba:f7:04:5f:3c:d5:78:d9:3a:82:f5:be:bf:
88:50:16:e2:c8:2d:e6:e3:f8:b4:16:8d:f4:10:8a:dc:a5:c6:
bd:d1:e0:46:e2:5b:e3:3a:8f:34:3e:26:7f:0d:3e:9b:b8:ec:
b5:0a:fa:82:86:9d:8f:41:2f:99:75:99:43:3b:aa:5e:ab:7a:
9e:b4:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:13 2025 by rpki-client