Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.cer (raw, json)
Hash identifier: 7DAylLo5l7cvnS3bJQtVigdoC879KZOtfwe+Uvysy+0=
Subject key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC46CE4401F9DE8641BEACDFA682C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35181
IP: 85.239.0.0/19
IP: 2a0c:ca00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:ce:44:01:f9:de:86:41:be:ac:df:a6:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:1c:b5:77:5d:3d:22:68:54:f4:4e:2a:01:
5a:cb:48:1c:8f:09:98:5f:75:d7:4a:0b:4a:06:d3:
9c:ea:07:91:89:ec:12:57:b7:7b:6a:c5:c8:e1:66:
48:6e:09:ea:24:f0:42:8b:60:0d:51:17:58:9e:05:
77:66:f6:04:64:c1:29:92:2a:18:50:9f:4e:db:09:
b0:32:55:06:71:07:68:7f:10:67:7d:a1:84:2c:da:
fe:a5:aa:3c:e4:a0:c5:b3:d2:6f:f1:89:6a:0c:e6:
23:44:91:96:60:d9:f5:51:81:d6:49:e0:6f:a2:84:
d8:83:12:7f:0b:0c:07:df:0e:96:fa:da:93:f1:98:
ad:f4:c8:44:7d:80:63:12:ad:db:05:89:1c:46:9b:
92:1e:49:25:11:ff:1d:42:81:cb:68:5e:97:1c:64:
bb:12:4b:0d:93:9a:01:d5:72:da:60:f9:b8:8d:fb:
00:9d:7f:f5:82:13:46:51:91:f2:ae:6d:98:03:5f:
49:1c:55:f6:29:ea:d5:02:92:a3:09:64:78:3a:64:
b9:be:75:04:09:ff:9a:6a:da:c7:b7:82:6f:2f:87:
1e:cb:71:24:20:0c:f2:f4:f7:8e:70:60:8e:6c:bf:
29:57:05:7a:d4:a2:e1:63:d5:19:32:28:f3:b1:d9:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.0.0/19
IPv6:
2a0c:ca00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35181
Signature Algorithm: sha256WithRSAEncryption
86:4e:1c:fd:91:6a:21:f6:02:4e:b4:f1:6a:5f:5b:98:3c:d6:
b1:52:db:20:39:f0:71:bb:eb:4c:7c:ba:6b:57:6d:cc:e6:78:
fb:36:26:7c:2e:21:02:a2:78:e4:67:15:ec:b5:e7:32:34:1c:
94:fa:08:b1:eb:ae:68:90:6c:87:3a:4b:b2:77:4f:d6:d7:95:
c3:e3:37:c4:6c:99:ca:1c:fc:55:0c:e6:e6:68:66:1b:8d:87:
2f:0e:1e:bc:d8:5b:3c:b1:d1:b5:4a:c3:03:4d:1a:03:73:0d:
c0:8f:ef:5d:74:d2:2d:62:cd:46:5f:2a:d1:3c:e7:5a:33:1b:
1b:61:bb:30:bd:3f:05:6f:e1:dc:3f:4a:f4:51:df:cf:c1:dc:
c3:6c:4b:51:90:91:92:21:8f:e4:56:15:21:55:50:1c:f4:f0:
b0:34:a6:e8:90:e8:ed:13:57:5a:05:49:53:75:53:af:57:da:
24:a2:4f:ad:ef:c3:6d:bd:67:8a:ad:d3:d6:76:f2:d8:11:9e:
88:14:1a:72:68:89:d5:0d:b9:c3:46:4b:6f:9e:2d:fa:35:6a:
1e:6f:e1:62:a4:84:55:a3:b1:cf:e1:0c:a5:d3:e6:38:43:ca:
22:14:cd:b6:4c:62:d2:6c:a3:fe:9e:5b:3f:eb:d7:f3:88:a3:
e0:0d:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:19 2025 by rpki-client