Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
File: dPEFnCc8UO3PPc7fxYABUuyR26I.cer (raw, json)
Hash identifier: t17MkP6TxKYR2Ea9o3oz3/DGJwwCJo3hJiifSP870b8=
Subject key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5AD77634776E1E06DED5AA0AE3E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.254.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5a:d7:76:34:77:6e:1e:06:de:d5:aa:0a:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:12:63:5e:98:02:a4:a8:ff:3f:60:c9:7f:
98:db:4a:16:27:33:06:fd:17:0e:f0:22:11:1e:c7:
84:1c:99:0a:db:3b:95:c1:0f:e0:14:48:aa:6c:75:
86:9a:9e:7e:ec:2c:fc:62:62:88:69:69:ac:a9:3d:
c7:99:11:33:6f:8c:85:77:3b:ec:b5:b6:b7:1a:51:
d8:96:eb:3b:7e:a2:2f:c4:98:40:81:1a:8b:46:07:
30:25:d3:32:40:77:0e:80:db:56:60:dc:3d:ff:b5:
8a:3d:e3:96:2f:4f:a3:68:78:c0:52:9b:bd:02:76:
b4:ce:6b:fb:a8:fd:45:78:96:50:fd:6b:a5:bc:3a:
68:32:c1:aa:8d:06:43:f3:4a:aa:b2:0f:7f:82:4a:
28:8a:59:fb:01:ac:0b:cf:de:00:f9:5c:bc:32:67:
1c:1e:7d:df:80:78:49:4c:9a:ec:84:e1:9f:15:c1:
cc:4a:c6:13:4c:d1:a1:50:fe:e2:1a:dc:f7:1a:a5:
6f:a1:ea:ce:30:a3:99:e3:06:20:3c:6f:a9:16:01:
90:d6:11:fc:96:38:0b:98:10:a8:3d:50:a5:25:ec:
93:31:5a:ca:d5:0f:bf:e8:92:5f:bc:a9:40:9b:c8:
4b:29:90:29:6e:e6:a7:e1:01:a5:3c:95:e0:89:33:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.80.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ba:62:f8:b5:80:84:de:b2:be:b8:0d:84:f5:67:61:a8:93:
e2:37:8b:53:73:09:78:21:e6:b4:69:99:c3:af:80:d8:6c:a4:
e8:56:53:13:49:7c:69:9e:66:95:ee:a6:37:b2:e3:d3:c3:1d:
21:5c:a2:a0:31:e6:46:04:63:87:30:c1:7f:42:3a:72:2f:6d:
45:84:a1:21:5d:44:48:6c:69:77:01:89:0e:4a:87:32:ad:cb:
2d:66:81:c4:13:9c:09:85:15:14:51:99:b8:9f:b9:c3:64:b7:
ff:a6:ce:87:3c:bc:75:d0:b9:99:dc:79:f3:c0:c6:30:a4:22:
49:2e:64:3f:6e:85:79:8a:c4:7c:4b:46:f1:64:0a:c5:3c:8f:
4d:ac:a8:5b:bb:18:ce:9f:55:ee:51:3f:4e:96:dc:83:6d:53:
8e:f1:a3:86:3d:3d:6b:78:c9:38:e4:e7:0d:39:fd:1c:5b:a3:
70:1f:22:9f:28:da:3c:c1:49:11:c7:b1:27:90:51:87:ab:93:
61:fe:b2:48:b2:36:38:12:52:bb:5c:bf:4e:45:d7:87:f6:7e:
41:75:e1:d6:5a:4d:8e:a9:0f:64:ba:b2:c2:60:7a:8d:bb:df:
71:9e:9f:21:4c:af:b4:13:fc:96:f4:17:f1:f0:73:18:c6:97:
9d:83:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:13 2025 by rpki-client