Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer (raw, json)
Hash identifier: /0aRMUenj8o5/02azHRwpjEkPou1eH0qTKIFrfFbDis=
Subject key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521C1294426AE87871F8CB6482F54D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.246.122.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c1:29:44:26:ae:87:87:1f:8c:b6:48:2f:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:7d:93:cb:63:b8:58:34:bf:29:b0:aa:3b:
fe:1a:2f:13:80:f0:1e:d5:54:c2:9a:46:ab:0f:63:
e6:09:2a:6f:36:5e:02:13:f7:ec:5c:86:a8:18:4a:
3b:4c:e8:46:34:e5:95:89:af:e4:ba:9b:43:62:b6:
c6:c6:7c:0f:69:c5:3a:0c:23:e3:a3:5b:f2:a8:d5:
41:fb:f7:40:ed:ff:7f:fa:bb:59:a2:98:b2:93:ad:
3f:74:b4:46:84:2e:0e:48:98:22:ab:db:3b:cc:fd:
f4:1f:f4:08:71:b7:cc:6c:9b:cf:38:36:fe:c4:f8:
aa:2f:cf:d7:72:35:a5:70:70:b2:48:7f:c2:67:50:
f7:de:8f:34:89:71:b3:6d:3a:3f:5c:1a:64:2b:c0:
68:8f:6d:45:d4:a2:35:50:ac:96:ba:fb:3e:69:d1:
54:95:cd:35:3e:04:a4:9b:73:f8:f4:2e:0a:c4:96:
55:9b:45:1d:1f:14:c2:3d:9f:b7:16:43:a0:ad:0b:
4a:63:17:cd:7a:d3:41:7a:d0:75:96:18:ce:08:84:
21:fb:76:89:83:31:e7:82:ba:51:36:f8:ae:63:b5:
3c:fc:d0:29:5b:72:e4:60:ff:70:62:6e:f6:7d:3b:
92:97:6f:7a:b9:19:03:f9:f0:65:a9:21:f9:30:62:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.122.0/24
Signature Algorithm: sha256WithRSAEncryption
07:90:ff:ac:95:87:ce:aa:e3:a9:8e:d7:48:12:9c:d6:e2:ee:
49:67:0f:b6:1b:8d:4e:f9:07:95:27:c5:94:27:91:de:22:3c:
89:d3:37:be:c8:f7:c5:1e:18:cc:d4:17:89:8d:e7:3d:cb:7b:
a0:79:25:84:32:6f:8b:d4:1c:47:39:a9:ec:1f:bb:10:94:8e:
a0:90:bc:06:15:58:0c:1a:f3:fc:a0:71:da:7a:d7:2c:0c:83:
25:00:2b:dc:f7:3d:7d:d6:1a:c1:fe:7e:43:29:e0:af:fa:05:
95:e2:8d:ac:b4:88:fe:60:d5:59:ae:b7:b6:9b:21:14:2c:fb:
d2:7b:75:86:7f:95:d8:71:72:00:2b:85:4f:22:7c:0d:6a:f1:
f2:eb:72:b0:26:93:25:99:16:d7:e2:3e:15:b4:be:89:5a:97:
a5:d7:97:bd:fd:6b:b6:90:da:58:ed:3c:bd:23:34:e8:2c:fe:
d2:30:1f:ba:ad:11:31:b8:81:44:1d:83:72:7e:d4:dc:0e:45:
6d:1b:1e:f9:b5:6b:3d:36:2e:81:6b:f6:fe:44:4d:6e:37:f4:
af:6c:8a:fd:1b:2b:58:b2:62:33:ca:f6:7e:b6:0a:62:f5:c1:
8a:94:54:9c:70:bc:ca:5e:23:1e:4b:40:4b:c9:83:60:d8:60:
c5:ed:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:15 2025 by rpki-client