Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.cer (raw, json)
Hash identifier: o9gmpd3VcWgETLNvzHQrTOCOT+6wLhK5AWxb0MpW8gk=
Subject key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BB6ADB96A0FB63FDA26CC18FD8C32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.142.248.0/22
IP: 193.53.2.0/24
IP: 193.53.5.0/24
IP: 193.53.7.0/24
IP: 193.53.12.0/24
IP: 2a0e:dd40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:ad:b9:6a:0f:b6:3f:da:26:cc:18:fd:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:22:f0:e9:85:86:1e:e9:35:80:9d:06:3d:
f6:07:1f:36:af:95:3e:1e:37:6c:f2:36:75:f9:5e:
ba:6c:bd:1e:b4:86:60:a2:9a:19:d5:97:7c:c3:fb:
aa:dc:cf:7e:c6:62:58:d4:16:69:4d:69:69:5a:ca:
84:9b:4c:65:c0:bd:b1:86:17:03:e3:8e:4f:f4:0c:
5c:41:c5:9c:36:61:52:01:8e:8b:90:3e:f3:66:fc:
aa:77:86:b1:3f:f7:99:4a:36:7b:13:7c:9d:80:5b:
24:68:44:62:c6:7c:65:56:e6:0f:9e:a7:42:02:6b:
e8:86:28:bd:50:2b:0c:5a:17:4d:fa:e9:06:4c:29:
67:70:90:11:bf:97:68:a3:07:0e:bc:2c:d2:2b:74:
3b:d0:dc:13:c4:45:46:bd:2f:93:dd:ad:e3:c0:b1:
8c:69:66:2c:29:35:cd:fd:9c:4e:a4:a4:68:30:1e:
9f:e3:92:92:50:14:7c:84:10:24:27:23:7b:e7:6a:
cb:b6:a8:ff:59:fd:dd:1d:e8:87:60:9b:d6:8c:4b:
cf:a9:04:42:0e:66:d7:eb:76:86:6c:ea:67:69:ab:
ed:72:d9:98:0a:ca:79:95:d1:b5:bb:f7:82:45:3b:
7c:9b:2d:2c:52:6e:19:73:60:bf:88:c6:06:dc:5b:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.248.0/22
193.53.2.0/24
193.53.5.0/24
193.53.7.0/24
193.53.12.0/24
IPv6:
2a0e:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
80:fc:67:5e:bf:f6:df:c0:cc:b1:ea:88:80:0e:bd:75:9d:20:
a7:2a:1c:8e:dc:bd:58:91:61:6b:1f:29:bd:02:cc:e8:df:9d:
d3:ad:04:dc:d6:d8:92:b5:4b:42:e7:b8:a4:10:f6:c4:2e:e8:
e5:a7:7f:a1:a2:0b:d6:88:98:1c:04:c5:7f:6e:01:bd:f1:d2:
55:5f:26:a7:b4:8e:78:c2:0e:92:55:ac:21:ab:a3:38:dd:25:
18:c2:50:90:72:cc:99:e7:60:3f:38:a5:c4:9e:a5:12:e5:2c:
4f:ad:93:e9:9f:8d:c9:5c:a5:81:d4:f7:4a:66:4d:86:35:e3:
42:26:80:17:4f:7c:72:75:c9:8b:5c:87:e6:c1:32:8d:89:e2:
0c:5c:c9:01:f4:23:81:56:c1:cb:84:59:07:76:e8:45:27:3c:
e1:b8:4b:2b:6e:82:cf:d3:b2:85:06:c8:0a:6a:3a:d1:e3:e2:
32:03:09:2f:50:7c:52:8a:1b:98:56:7b:57:11:cb:61:4c:ed:
43:dc:2e:0a:b1:09:1e:0d:57:b6:79:cc:83:76:2f:6e:3e:cc:
84:e1:19:90:3f:0a:8b:09:f4:b1:6d:a2:60:95:11:1e:0e:1b:
17:1b:78:90:4a:2c:0a:f9:32:09:de:c3:46:49:c3:7b:0a:23:
bd:ee:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:30 2025 by rpki-client