Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer (raw, json)
Hash identifier: 83VbWmN6fxTVFg9FRdEC29yl5ZQbawrFWBdS+Kl9nn0=
Subject key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D807A70EC09898F36117DA782AD6FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.246.0.0/16
IP: 192.44.66.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:07:a7:0e:c0:98:98:f3:61:17:da:78:2a:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:87:29:47:34:a1:ec:18:e1:7f:9d:6c:a2:
44:28:be:19:65:d5:34:d8:5e:4b:53:39:81:f1:0e:
8d:a8:ca:74:d0:8a:e6:87:1b:4b:ae:cd:97:9a:fe:
cc:d1:62:6e:7a:dc:18:ea:78:08:7a:fc:6e:f6:d7:
ce:35:d3:cd:99:a1:13:91:88:df:0d:3d:05:54:84:
5b:f9:31:f5:8e:9e:8d:d6:a5:5e:ac:cf:77:69:16:
ce:e8:3a:a6:69:f6:06:28:aa:a3:eb:85:b2:d3:8a:
f8:84:d8:4a:81:5b:de:d4:fe:da:d5:3e:db:ae:eb:
cc:69:90:c8:f7:a0:07:79:df:e4:dc:23:0b:37:44:
4f:f8:00:0f:95:15:2e:35:8b:2b:34:13:98:be:ec:
76:8a:95:47:79:d7:6e:e4:2b:f7:94:66:65:ab:05:
81:d3:c7:01:5f:2d:63:bf:63:a2:69:ae:dc:b0:f7:
26:d2:96:4d:90:2b:3e:46:15:79:c5:ae:a0:ad:7e:
d2:f0:99:9c:1c:e8:58:64:be:e2:19:cd:a1:0e:56:
18:37:99:4b:f5:0f:83:d3:f6:44:9c:4c:24:12:5d:
ad:d5:c4:95:fa:5b:4a:69:0c:d8:54:14:59:b1:f4:
40:cb:de:d9:e5:03:be:80:fd:20:9a:ca:57:07:22:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
192.44.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:65:d1:72:83:47:fe:bf:1c:d4:75:c1:79:84:38:aa:0d:ef:
74:68:ad:2f:f5:c6:b9:d1:13:be:9a:c2:60:5f:a1:10:14:ba:
88:81:a3:69:55:d2:3e:37:da:5c:31:77:12:fb:a5:8f:7c:38:
58:47:20:23:34:f1:0c:17:76:fd:83:2b:99:9b:09:e2:9d:18:
d6:be:81:e7:90:aa:45:a4:be:56:09:4e:ba:ff:26:e5:2c:82:
59:d8:d4:a6:08:22:b4:1a:d3:73:fc:8b:0b:e8:c8:2b:22:0b:
7e:f7:46:3d:74:07:5d:1b:65:16:54:a4:7a:de:c4:98:e1:75:
24:d9:7c:a0:18:79:b8:39:1b:6e:ba:67:98:65:c0:de:a3:17:
66:38:53:c5:be:2b:86:9b:3d:83:24:3b:01:9e:e4:9d:49:3b:
be:c8:24:e8:47:fb:33:f7:7c:fd:55:bf:fa:e6:fc:85:90:e0:
f8:51:ac:db:77:96:57:c7:5f:a3:fc:c4:98:c0:10:57:6a:a2:
01:e7:ab:ab:a4:4d:6e:d2:77:8f:6a:fc:d9:d3:47:3f:8d:77:
9a:e7:de:14:5d:5b:60:9c:ab:0a:ec:40:b9:42:e7:f7:c3:33:
01:ba:1f:5e:cd:18:86:15:eb:2b:f1:30:74:20:05:24:0e:e1:
cc:0d:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:54 2025 by rpki-client