Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.cer (raw, json)
Hash identifier: iGZC/cMGiXDRC9AeG8/JQ8sDKYp9+ncoU/hkTyZKSY8=
Subject key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E597976576D3E407696376BC9071
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.111.245.0/24
IP: 2001:67c:12b8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:97:97:65:76:d3:e4:07:69:63:76:bc:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcaae514c5f9940391435614d79404bee1209b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:c4:b6:65:ca:e2:f0:58:18:5b:c5:1b:2f:
50:c3:12:06:24:c9:f1:51:91:f6:6c:f0:7d:50:b2:
ed:24:25:87:ce:59:d9:7d:cf:24:4d:50:4b:62:ed:
9c:cb:9c:d3:20:cf:5c:30:78:b3:f3:02:53:a7:11:
c3:85:4b:a9:65:3b:92:e8:21:db:81:8a:a1:b7:43:
67:75:d6:29:f5:ca:7c:97:92:c8:2a:90:67:4f:62:
83:3f:84:67:f7:02:85:0d:0f:2b:f1:d6:23:e0:81:
fd:7e:cd:7e:47:8d:99:3a:86:48:d6:fc:fe:91:76:
ad:5f:1b:f5:62:42:00:97:32:30:0d:45:c4:16:42:
7d:91:d6:7f:c7:df:4e:3c:88:fb:0c:7e:ba:cc:e3:
08:86:3f:df:c9:a5:bc:5c:c2:f5:12:90:53:56:92:
70:da:c1:ec:7f:36:dc:0c:b1:88:d0:47:6b:70:d0:
d0:a0:03:66:20:6e:2c:eb:55:10:bf:2d:f5:7c:81:
14:49:98:e8:88:36:a4:aa:d9:43:a6:ba:6d:7e:30:
5f:d1:5a:bb:a1:7e:14:a4:d3:3b:f6:77:64:7e:0c:
49:35:0c:70:ed:55:1c:91:15:f6:60:f1:4b:8c:b6:
e0:c5:d8:30:52:16:19:07:6f:58:ab:1f:52:88:63:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.245.0/24
IPv6:
2001:67c:12b8::/48
Signature Algorithm: sha256WithRSAEncryption
93:9c:78:d7:ab:63:3e:98:18:77:9e:ce:c6:37:a2:83:31:dd:
37:0e:45:d2:3f:a4:cb:7c:90:4d:d6:0f:37:b3:b1:39:cc:e5:
2c:ac:df:b6:4d:8a:54:88:6c:e9:20:08:c5:1a:37:35:eb:52:
f4:cb:4e:59:92:ea:e9:5a:eb:be:c9:48:cc:c6:8b:26:ab:b1:
43:57:f3:be:07:73:e3:e1:26:99:0b:78:4c:95:35:73:00:c6:
1b:7c:92:de:40:eb:04:df:0d:5a:ad:c9:f2:c0:5c:7d:f9:2a:
c2:d5:ba:36:4b:9f:82:0e:ca:4f:3b:84:e9:fe:f1:fe:ad:36:
1a:87:24:64:4d:94:fe:9b:eb:74:8d:6b:7a:68:41:38:be:64:
a6:bf:57:0d:2c:fd:42:1c:7c:0a:d3:0c:79:03:3d:40:03:d5:
bb:c7:d4:6d:57:8d:80:30:f0:71:88:69:bd:4d:a6:af:ce:b3:
40:7a:7c:f7:b2:7f:fa:cd:7f:1d:37:43:a8:86:a3:34:4b:0e:
78:ef:2c:46:07:63:5f:b3:01:2f:41:f4:7c:e1:b4:e0:fb:5a:
8d:48:ea:9c:9a:d3:f2:c5:8a:63:65:78:3e:0f:58:21:40:e8:
db:e2:f7:9e:f4:9c:63:c8:85:8e:d5:19:58:1f:38:4c:d7:75:
0b:b7:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:47 2025 by rpki-client