Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.cer (raw, json)
Hash identifier: Ec/1lwL0DrUf9Eepr8jz8SZ2e2ESc9GdS8J8wNvK2RU=
Subject key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B232B01A33867B18AA9904D84B7971
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.206.0.0/16
IP: 147.142.0.0/16
IP: 192.100.98.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:b0:1a:33:86:7b:18:aa:99:04:d8:4b:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:cc:5a:35:13:90:cf:95:b7:33:c8:68:72:
95:f0:00:b3:61:da:0c:8e:14:ff:d2:33:c5:db:bd:
a5:51:0b:ee:41:e6:2f:f5:5c:dd:e8:fa:d3:22:a0:
c5:0e:67:2c:76:7f:be:e3:62:ef:c8:ba:52:ec:21:
bd:26:73:9b:13:36:ab:d7:45:da:34:0b:c3:45:80:
50:2a:af:c9:03:a0:18:39:68:76:64:fb:31:e3:a9:
7e:5d:ac:06:d7:1a:9c:13:b5:ee:37:5c:b2:ad:d6:
e1:ba:d1:66:12:a5:ed:e5:63:b0:53:61:88:7e:d1:
02:54:99:c7:19:a1:69:64:07:19:3d:9f:52:02:0b:
12:46:f5:44:b0:f2:59:54:06:e4:6f:d4:b6:f4:7d:
71:84:b7:3f:9e:4b:21:4e:ec:e3:8b:29:59:8b:b4:
1f:2b:36:de:70:b4:9a:3d:17:fb:61:65:1f:d8:d4:
74:d6:b7:29:bd:98:70:80:b0:be:f5:ac:c2:bf:75:
d2:04:7b:20:78:80:6b:67:04:d2:08:75:37:39:df:
fa:80:aa:40:30:46:ac:89:a3:6f:e5:6e:96:4a:6e:
5b:b9:0d:52:bf:0c:f7:7d:73:29:f6:ec:62:47:cf:
c8:85:f6:8a:48:44:74:12:cc:b5:16:18:29:3e:1c:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.206.0.0/16
147.142.0.0/16
192.100.98.0/24
Signature Algorithm: sha256WithRSAEncryption
91:86:02:77:f0:4b:97:c3:0b:50:0c:61:96:1c:2d:c2:80:3d:
29:c9:3f:83:90:7d:99:fe:55:4e:a6:76:81:23:24:82:48:f5:
5d:21:f5:7f:9d:23:db:ec:fe:3d:b0:1a:d3:bb:5e:22:e3:45:
9e:4e:fc:80:bb:49:f2:c6:a0:ab:03:9b:46:1b:f6:87:d5:69:
e2:89:2f:e2:81:c2:7a:c6:f8:e5:44:13:cd:a4:7c:cf:fd:08:
78:e4:ca:a9:21:60:61:2b:5f:eb:35:1b:15:ee:c9:c6:47:de:
6a:b0:e2:8f:78:27:94:36:ab:00:55:4a:37:57:da:6a:b2:4e:
e4:77:9e:b8:bb:03:36:dc:8e:95:f9:8e:49:7c:61:fd:e0:40:
05:5f:c4:49:60:d6:22:ec:b7:6a:47:92:d1:be:91:47:82:97:
07:8d:c4:a1:b3:b7:fe:49:e9:e7:0c:1b:a7:a4:99:8c:d9:36:
dd:da:0f:8d:dd:24:60:c6:7b:92:91:8e:73:8c:08:7a:fa:2f:
6a:c8:9e:6e:09:06:39:03:56:53:a7:83:ed:78:e9:96:0f:54:
97:03:1e:78:d8:80:71:46:0a:9e:9b:f0:dc:f7:97:81:a6:6c:
06:66:e1:35:bb:5c:e1:80:c3:cf:a2:28:36:16:fb:5b:88:79:
88:ee:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:40 2025 by rpki-client