Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
File: V76Px5yTUE_CH_cPukaaTLvi8Ck.cer (raw, json)
Hash identifier: FCoB5iWDREtw399nBjHOfjBIMk4hZaupV0Exo6kKkCU=
Subject key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F42BACA108274B1622363D01FD4FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200970
IP: 185.89.160.0/22
IP: 185.145.16.0/22
IP: 2a05:d9c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:42:ba:ca:10:82:74:b1:62:23:63:d0:1f:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:c6:03:8c:a2:47:ed:98:97:63:77:83:0a:
c5:ff:6a:4c:6b:fb:c7:e9:fc:39:1a:0b:4c:d1:05:
cb:78:c6:8a:84:13:88:c8:4d:57:f8:33:b6:6f:57:
55:d8:0f:cf:b1:ba:93:9d:c9:d9:c0:cb:63:5d:c4:
67:c7:29:70:f9:3e:a1:5d:73:8a:62:d0:2d:6d:c5:
f5:56:11:33:66:ba:fe:c3:f7:3b:13:10:e1:ab:19:
cb:0f:15:b4:d1:a4:d2:a8:74:8f:9e:c3:89:99:e7:
62:d9:05:81:2e:e6:a3:4c:a4:ff:68:86:2b:ab:58:
e6:11:a8:54:b7:78:52:06:d8:41:14:13:e0:bd:30:
65:b3:36:b1:62:50:68:e5:15:a1:44:a9:f1:26:30:
63:b1:d2:ac:d0:0c:17:b9:13:b1:4b:cb:99:38:9a:
84:92:46:97:dc:e5:f2:b3:43:c2:3a:50:a5:26:8f:
03:da:ba:79:07:39:44:4c:1a:8a:33:e7:eb:0f:9e:
f1:5f:8f:09:d2:8d:79:c2:97:33:54:4b:2b:16:55:
15:b9:b0:c0:f2:93:44:b2:87:54:d8:28:27:c0:3e:
17:45:fe:b6:4f:3b:3d:b1:56:80:c9:85:7c:6b:11:
dd:50:ea:7c:68:5d:57:89:f5:d0:ed:b3:d8:fc:94:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.160.0/22
185.145.16.0/22
IPv6:
2a05:d9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200970
Signature Algorithm: sha256WithRSAEncryption
46:00:75:36:5d:a0:f3:13:30:64:67:1d:9d:25:79:2a:42:d9:
4c:4d:e6:81:ca:4b:50:53:88:8a:da:7e:e7:af:e4:f5:82:c2:
d1:e1:39:2e:15:df:8f:37:be:f5:11:08:ee:5b:f9:9f:3f:c7:
60:fd:fb:af:c8:80:2d:18:e9:69:68:47:fd:ef:13:65:64:72:
b6:84:bf:cb:a3:fe:e1:f9:8c:c3:eb:27:78:e6:32:9c:fd:d6:
f8:dc:9d:6d:51:66:d1:54:b2:55:a7:f4:8d:cd:2b:22:3b:4f:
76:0d:91:25:38:1d:7b:e7:3e:f9:88:2b:7c:e8:bc:73:87:54:
61:e8:17:9f:6d:d1:4f:d9:7d:e9:17:c9:2c:55:b0:14:ae:91:
37:d8:02:96:04:cf:98:9d:de:a5:8c:2e:ef:d9:4d:68:bf:80:
43:e7:cb:ba:0e:09:c7:32:97:8c:e5:57:e4:c4:60:69:97:80:
01:7f:7f:37:6b:e4:c4:3b:b5:d5:5e:15:91:8e:cb:56:d0:ed:
07:7f:1b:b2:24:90:38:8d:96:7d:3e:a4:a4:45:77:03:ec:71:
c7:a9:bd:61:cd:b3:1b:69:b9:dd:07:01:89:8e:4a:17:f9:1e:
48:2c:3e:fe:b1:a1:f1:e0:61:36:b6:4c:0f:19:63:57:9d:99:
2a:c6:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:53 2025 by rpki-client