Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
File: fbq8m8nDq4pzmius48V7AvRFkOs.cer (raw, json)
Hash identifier: V2deiwsrlOOgV/HsvjKUrk1gO2/e7YrKAxTB80nbhrA=
Subject key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EB0078303FC98ED8C325CDA94F83B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.210.24.0/22
IP: 2a0b:50c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b0:07:83:03:fc:98:ed:8c:32:5c:da:94:f8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:2b:98:bf:3e:a3:90:19:e5:6b:cb:ed:46:
b9:23:6d:12:29:01:ef:66:5d:16:0c:f1:7d:a7:b5:
df:9e:6c:02:3f:61:ce:f6:11:f8:82:c8:71:fa:49:
28:a5:4a:11:41:18:d6:07:b5:4f:c7:80:a1:80:ad:
aa:86:ce:d6:28:d0:e1:5a:01:86:c4:f0:04:7c:a3:
30:20:fd:8f:4b:b0:48:11:93:2c:05:bf:d0:d4:f2:
70:25:d1:57:a6:0a:34:57:fa:82:49:7a:1b:d6:bd:
14:65:11:c8:69:e5:c8:95:d8:a3:ce:7f:69:a3:19:
01:e5:a9:1c:96:95:d8:00:5d:35:d8:7b:3f:e7:37:
f1:b9:93:34:8e:68:85:ba:9b:8b:0e:8d:76:a4:1d:
ab:bf:c8:b4:1c:01:cc:bd:0f:af:0d:07:84:6c:ff:
98:bf:ec:03:3e:2d:93:55:08:a8:1e:64:64:ef:02:
c5:f4:7a:3e:33:d3:85:cd:f4:f8:e1:75:cb:3e:9f:
2d:b6:a8:7a:d7:86:18:0e:72:cd:67:b6:28:71:e8:
ea:fb:40:7f:7e:5e:66:4c:94:56:68:92:2f:3e:fa:
d8:17:72:04:b2:22:f4:19:95:87:b5:31:a3:6e:55:
71:9c:e5:68:36:fa:c2:2b:4b:92:89:2e:e5:85:76:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.24.0/22
IPv6:
2a0b:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:0a:76:77:07:33:d8:85:ac:25:f4:ba:23:af:a6:3c:f6:cf:
bd:b5:69:15:05:93:29:35:db:b3:e7:96:84:e1:d8:b7:ca:81:
e1:eb:e9:05:fa:75:eb:88:73:fb:aa:f0:61:10:71:c0:c8:6c:
3c:d5:45:98:c0:b3:83:76:fb:05:0d:21:8e:24:f9:34:ea:4a:
80:82:87:57:e1:b9:67:6c:6a:c2:59:78:71:93:3f:01:4a:6b:
e9:e7:df:f2:48:fc:59:df:a4:3f:e0:46:89:eb:59:1f:08:f4:
05:fb:a0:3f:75:ed:ab:2a:e0:40:af:89:9b:55:c5:1f:1b:e0:
2f:fc:38:3b:41:1d:1a:77:94:a6:31:56:5b:04:da:e6:9a:11:
30:28:8f:1b:17:ff:48:5f:a6:5b:05:23:9a:82:56:ec:b9:f9:
3b:fa:65:ed:80:9a:19:4f:0f:ba:79:5d:69:df:39:c8:1f:9c:
a0:66:8d:8c:b0:db:78:7b:c1:78:f5:1b:71:96:92:88:0b:d0:
ae:97:3a:1d:4d:e4:00:2c:7e:10:38:f0:2e:ea:22:2a:df:ff:
4d:c4:b0:91:36:41:42:ce:f1:41:80:8b:8f:ea:d0:4a:3c:fa:
e9:4b:af:35:f3:1a:29:1b:79:77:a2:47:e2:39:22:9e:f8:9c:
9f:13:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:55 2025 by rpki-client