Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
File: dhrP1knI7q2FUZQngfoW9o29EPM.cer (raw, json)
Hash identifier: g7B/2Ht7Df3Ka62ciCZfkin5L2L/mPdp53hSXqx2Nqs=
Subject key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B25D01B8A50F9304B216464CE0D8A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41836
IP: 91.224.72.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5d:01:b8:a5:0f:93:04:b2:16:46:4c:e0:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:84:be:e3:fe:7d:22:98:e7:58:df:8d:02:
6e:6e:4a:80:27:e7:4a:56:b2:db:51:4e:f1:a4:3c:
ea:66:58:03:7b:ab:bf:0d:27:ef:1b:82:75:e6:c9:
90:39:75:1a:fb:eb:8a:c4:b3:92:6e:11:d1:f3:2d:
8e:32:03:fc:e5:f3:65:64:38:e5:6c:4d:9b:27:92:
63:ad:0b:97:cc:a7:a1:76:c1:a4:f1:bd:d2:b5:35:
bf:f4:b8:15:fa:86:3f:11:ec:0e:62:38:20:23:a2:
a5:9e:db:0b:2b:6a:d7:ba:a7:08:48:9a:89:5e:be:
59:7a:78:7b:82:1a:05:14:d3:1d:27:ff:8e:d7:b9:
14:ea:03:ed:c8:b3:42:4b:42:7e:6b:28:27:cb:0d:
85:ca:d8:d7:59:db:85:1c:bd:74:76:d9:93:8c:a0:
ab:1b:aa:c9:1c:1b:58:91:af:0b:60:f2:75:63:b1:
af:2c:ab:77:45:6b:65:c6:3c:4b:dc:5e:8a:7f:74:
91:00:7e:28:dc:5f:c5:b5:cc:85:fe:80:2e:11:6d:
45:52:15:fe:37:18:ba:56:09:77:63:6a:45:89:8c:
5a:ed:ab:4e:44:07:87:47:4c:c1:5e:59:22:8c:d8:
87:e5:18:47:79:24:aa:cb:23:05:41:2d:46:dc:7c:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.72.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41836
Signature Algorithm: sha256WithRSAEncryption
43:ea:e4:ec:15:7e:5d:ee:fe:ad:f2:e4:ff:44:92:81:f3:a4:
4e:1a:79:08:71:b6:ac:c2:51:04:3b:40:1d:8c:d1:3f:57:f0:
1a:29:01:85:99:c4:3a:ad:85:9d:bb:f8:3a:fe:95:c7:10:89:
f4:e5:97:91:87:f6:de:8c:27:7e:b7:f7:3e:0d:f5:cc:18:b2:
58:fd:aa:a2:1f:7e:70:41:bb:85:57:ce:7a:22:3b:f8:7b:93:
ac:42:65:bd:fb:f2:cb:3e:78:98:b5:da:72:59:bf:6e:dd:d2:
00:b8:7f:77:dd:e3:3b:a3:bc:72:6c:6b:6f:88:86:c9:9b:cc:
18:c4:bc:2c:34:73:70:0e:47:b5:0a:aa:94:5a:bf:c9:7a:88:
2a:2b:0b:cf:87:c2:fe:11:62:e0:25:0c:c9:67:f9:5c:cd:b1:
6f:47:e0:44:52:7d:f8:75:57:c6:58:67:13:e9:60:e4:bd:16:
10:8a:82:40:21:9b:cb:d3:9e:08:a7:0b:02:10:3b:6b:5f:b6:
7c:b3:f2:96:48:0f:78:84:b3:77:e8:f0:47:43:38:bc:86:d6:
4f:a0:23:ca:44:04:c5:47:7e:45:5d:4e:e7:28:4e:46:b5:86:
db:3c:85:9f:d5:c8:2d:e0:54:a3:7d:ce:48:48:ce:5e:64:82:
b3:90:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:25 2025 by rpki-client