Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer (raw, json)
Hash identifier: kNYBUFVe+4Mn+hABHRC8l4hKOpNFbZvi7PzkzLxQ/X4=
Subject key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236967A323C883F1484F83EC1C33FB1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.42.100.0/22
IP: 2a04:8c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:67:a3:23:c8:83:f1:48:4f:83:ec:1c:33:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:52:58:d5:8b:41:af:ad:25:65:3c:c8:e0:33:
7b:ae:bc:3c:60:2d:f3:d5:04:96:0c:1e:0b:11:c8:
4c:bd:9c:7d:c3:b6:c0:30:3a:7b:96:8c:32:51:28:
25:d9:47:e3:cf:75:48:98:27:9e:ff:56:94:68:ca:
9f:9f:6e:51:1d:79:45:69:74:3d:92:b2:2c:0a:56:
dc:5d:ed:76:c3:d3:3f:8c:f1:38:04:3e:c2:4f:15:
4c:92:20:c1:38:1e:df:20:9e:80:a5:d2:ed:22:8b:
c7:24:7d:f1:e6:b9:19:d1:b8:0b:85:29:56:84:b7:
f1:62:c0:ce:f2:9b:da:0c:85:3f:58:96:b0:7a:a3:
58:d6:60:09:bb:05:8e:99:87:0b:83:2d:2d:af:88:
e9:53:b2:25:6c:5a:b3:f9:8e:49:2f:fc:6e:51:cf:
2e:ad:06:34:a1:ff:3c:22:07:96:d0:af:fd:71:5a:
22:24:87:8c:92:94:15:26:b9:85:76:68:c3:c8:15:
50:1b:59:35:5c:04:ee:35:ca:ae:66:f0:88:6e:c6:
1c:f4:78:9a:11:3f:5a:59:5f:85:32:50:b6:3d:b2:
57:a9:82:61:03:1e:e3:9f:ef:f3:4f:4b:73:0a:4a:
9d:38:54:cd:a3:8a:db:dc:1d:ab:89:1f:a6:16:7c:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.100.0/22
IPv6:
2a04:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:38:bf:3d:cc:c9:48:2d:2c:27:bf:9a:95:95:25:19:e2:69:
dc:22:7d:e7:ac:f1:de:78:3f:0a:b4:12:1a:5c:5f:b8:f6:60:
c7:37:82:ce:8f:ab:a7:2f:a9:03:8f:5e:34:2b:de:12:0a:0e:
f7:6f:57:9e:35:9d:2f:13:5d:16:83:93:54:e4:ad:36:8f:6a:
4b:b7:35:aa:92:7b:bd:47:fd:93:b0:7e:c6:2c:cb:c9:e3:bc:
41:57:a7:4d:43:a8:7a:da:e0:27:e0:15:e8:8e:37:12:12:ff:
44:55:09:2f:63:00:5e:8e:6c:5a:9e:dd:2d:fc:58:c8:b5:ec:
59:a2:85:89:19:a3:37:19:75:91:17:21:8a:d6:11:fd:56:95:
f3:cb:4b:94:54:a5:c4:47:61:5c:83:09:40:ae:28:a9:69:ba:
93:99:25:97:03:2d:9d:d3:89:d3:e7:1c:34:aa:53:88:24:99:
17:a3:fc:dd:30:6e:89:d1:91:ec:87:54:d1:c8:60:fc:c3:f3:
76:cd:74:07:77:2e:63:dc:3f:46:6c:d8:76:27:70:ee:0a:7e:
41:ec:ac:71:6e:87:2c:68:dc:ce:42:39:8e:08:cc:a9:c5:53:
e7:45:f2:f4:5d:98:61:4e:2f:ad:2b:8c:23:5f:c9:e0:31:d8:
92:45:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:58 2025 by rpki-client