Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer (raw, json)
Hash identifier: xd7gE/zhsJgmbCIOtXYoKu3z4QL8XAyFA8hmiE0QOhc=
Subject key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445093DFB9C2BA79CB0D526F88C4528
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.8.166.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:09:3d:fb:9c:2b:a7:9c:b0:d5:26:f8:8c:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:62:e0:d8:24:f4:34:13:86:2e:be:f6:bb:
d5:00:45:33:52:40:67:e0:dd:2f:2d:2f:cb:d1:c3:
f7:4e:ee:32:ec:fb:82:a8:39:2b:e4:9e:57:a0:de:
7c:67:c9:c2:9d:bd:86:43:d5:60:59:67:82:28:33:
0e:ee:94:40:92:ce:fe:78:9d:80:0b:63:84:5c:f8:
e0:75:f8:29:39:64:3a:62:49:e2:fc:a2:27:ab:33:
2e:dd:2e:3c:67:d2:d5:76:1e:ec:c8:cf:a0:4b:15:
7c:3d:8b:dc:68:18:ce:a5:f5:b3:a6:2d:6f:8a:7e:
e9:c6:aa:ae:ad:b8:ae:f9:b7:1d:51:f6:06:f3:19:
46:c6:1e:dd:48:2a:74:63:c3:f4:53:bd:f8:1a:05:
ef:dd:26:10:36:31:58:c3:9b:ff:69:70:b8:87:be:
eb:c0:db:32:a8:84:d8:75:54:8b:e1:61:2c:d7:f7:
18:45:93:c7:10:18:30:86:93:ba:f4:62:1e:10:80:
e1:cc:81:75:6f:60:6d:6d:eb:8f:8b:86:c2:f9:6b:
6f:28:c9:dc:7b:15:be:59:11:3f:c3:ab:e7:51:69:
f2:38:e2:d2:a7:51:2a:1a:3d:d1:00:a6:61:79:5f:
06:79:f6:05:95:dc:56:43:fc:60:3d:24:62:da:31:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8f:aa:f9:20:99:c8:64:8d:fc:8d:f3:bd:eb:e3:d6:33:ea:
61:88:e6:33:e8:a1:9d:31:3a:30:6d:14:b5:0a:44:b7:4f:53:
66:23:79:ec:0f:b7:4a:f3:b3:b5:fa:da:96:da:b2:41:43:da:
e2:21:0b:03:00:69:59:12:6f:c3:2b:7d:25:aa:55:24:7f:ec:
ee:d2:ce:41:39:b1:13:42:2c:8f:fd:31:36:f2:76:45:e1:36:
94:d6:ce:23:13:45:6b:26:1a:85:cd:4b:7e:fc:d6:3c:ff:40:
79:d0:5f:e5:10:08:37:72:1c:39:99:e9:94:ca:ba:1a:ef:7d:
fe:32:5b:b1:05:27:9c:dd:15:cc:a7:8d:87:42:b6:a0:93:7d:
2b:1c:ee:8a:ce:66:87:e6:2c:30:cf:b6:9b:7d:9e:f1:bf:d5:
15:c7:dd:f3:8b:86:06:5c:57:e5:8d:33:51:7f:f9:72:a1:37:
6a:d8:47:3f:bc:6c:3b:48:9f:3f:68:3e:35:ba:5a:2f:96:06:
b2:66:5f:0c:b6:76:be:48:3b:31:3c:ff:39:87:55:24:07:a4:
87:5b:11:47:8c:e0:eb:4a:57:03:b6:ee:a2:f0:99:38:b8:93:
11:ef:26:1f:3f:8c:f4:7a:dd:dc:67:0b:46:e3:f6:09:fc:fc:
1b:0d:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:11 2025 by rpki-client