Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
File: YRBtLf9xFvNat_oQJ1pF44O85SM.cer (raw, json)
Hash identifier: EXuBUks3Y87SZehcxkVwrI6qQbw2FC+Oa1fOZH01yu0=
Subject key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A01EE916C0B705ED0BFDAB7EEBD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:1300::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a0:1e:e9:16:c0:b7:05:ed:0b:fd:ab:7e:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:c5:22:fb:3a:fc:9f:d4:43:68:9d:7f:10:
a9:35:fe:ff:11:46:21:0e:7c:26:6d:d7:1c:6a:d3:
b1:a2:5f:a6:04:03:7f:58:40:46:00:9b:ed:bf:7d:
d4:be:5b:0d:78:d2:2d:01:5d:04:cc:d5:2c:f0:43:
56:04:c4:99:79:fa:6a:f8:39:96:99:16:28:b2:db:
d3:56:44:81:8f:11:67:c4:3a:26:6b:ab:30:16:ca:
85:99:98:be:71:c5:bf:8f:85:0c:36:52:f2:8b:3e:
c7:26:3b:72:1e:50:9f:bd:e4:5a:3d:0e:3f:06:9a:
42:8b:82:ed:66:b4:bf:64:7b:c8:bd:b1:5e:fc:72:
0e:7f:ed:a2:78:5a:34:20:89:8d:17:d6:1b:ed:d8:
f4:9d:18:b3:af:d2:f3:6c:44:80:68:9c:88:5c:80:
2e:61:b8:92:07:c6:f8:4d:41:a5:c6:2f:0f:37:63:
b2:a6:96:2d:cd:9e:62:da:1c:ac:94:d5:68:f4:42:
d5:40:0d:05:81:ee:d6:d8:76:1f:5e:4e:f7:8b:4f:
ae:87:31:ed:af:1a:ff:72:d6:65:47:56:9a:a8:50:
ab:1a:8f:c7:c0:22:ca:7a:e5:0b:a4:fa:0f:0b:5e:
8b:b8:54:f7:60:7a:76:55:bf:97:60:96:1e:d6:5f:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1300::/48
Signature Algorithm: sha256WithRSAEncryption
9c:7b:11:7e:36:14:eb:a8:fb:50:d8:ff:27:00:72:64:2e:22:
b6:27:8d:fc:1e:51:d0:f5:e9:53:e0:86:90:cf:53:97:59:3b:
bd:d9:5b:57:52:c7:c7:21:44:2f:fb:89:c5:c1:13:4a:89:62:
58:b8:c6:2e:82:44:5c:e9:53:f4:e2:63:87:ba:f2:78:46:57:
f0:0c:7d:fd:0c:69:58:b3:ea:ee:20:e2:6c:0e:4b:9a:ed:0f:
57:0f:a8:f9:79:19:73:03:83:cb:c9:2c:b9:bc:f2:6f:06:eb:
42:e9:4c:a8:16:7e:f4:06:ec:94:2a:64:cd:13:af:da:15:7e:
e6:ec:3d:78:f7:d9:4d:78:fd:fa:75:e8:2d:93:2f:fb:88:d2:
89:b1:b4:d4:92:68:20:2e:c9:7f:b3:62:97:46:ac:43:3d:1c:
65:66:94:9f:33:24:2f:30:c9:81:41:c3:cc:f3:77:ce:8e:07:
fb:20:81:f8:3a:5f:4d:e6:69:32:16:ba:cb:09:96:51:36:54:
bf:c8:de:2d:4b:25:c7:0f:c8:59:6d:41:68:d8:d9:ea:7b:de:
9d:97:a6:6e:11:d9:f7:18:68:cf:87:d8:b6:64:83:64:a0:e6:
e0:c4:ec:93:91:3c:17:6a:a7:42:8f:da:2e:1d:6d:61:1b:95:
55:e2:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:36 2025 by rpki-client