Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
File: i85CgamU1SFm7z_xdyi64hiFX8Q.cer (raw, json)
Hash identifier: 2WA7n3nFTuEZzxpifXXBfWtsEdrx4thLkTzZ5I5WlVg=
Subject key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F768D5ECDD5F2EA7FFB3EBFEB92B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.8.165.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:76:8d:5e:cd:d5:f2:ea:7f:fb:3e:bf:eb:92:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:94:6d:04:70:f6:f2:69:a0:c1:e4:4e:5c:
ca:8e:a2:41:15:b5:45:8f:69:ca:41:55:2c:0a:4a:
ec:a6:b3:97:fd:59:3b:f5:2c:3e:3f:44:ae:6b:84:
60:78:65:6d:a2:bd:20:0c:21:3a:12:5d:a2:22:d1:
02:f9:2f:ae:81:b0:4e:8b:9a:75:a7:e9:c2:ef:6f:
0b:a2:6c:b5:d4:e3:ef:ec:84:87:40:ec:1d:bb:3f:
43:0d:3d:8a:c1:3b:c5:81:18:aa:66:53:7e:66:5e:
05:00:e2:d5:fd:5f:f2:b5:aa:34:11:3a:11:0b:d6:
9c:f8:8d:5b:b9:7b:ad:fa:ef:04:2d:82:d7:dc:f9:
ba:b7:6e:bd:47:80:c7:72:57:de:ec:f4:e1:1d:d7:
29:24:88:f6:8d:41:c4:a9:94:a7:7c:71:c1:de:ef:
ff:ba:49:96:91:d8:b3:4a:32:53:89:3e:09:eb:8e:
4c:52:bf:6c:ad:e5:83:93:db:f8:23:24:13:0e:15:
0c:06:df:aa:e2:2f:81:9f:3b:b5:98:63:1b:87:90:
73:e9:bd:2b:8e:f4:bf:94:aa:e8:38:47:38:d8:5e:
ee:51:27:e1:71:18:80:af:b9:1c:4d:bd:23:fb:9b:
e7:22:c9:fb:0a:00:2b:f6:dc:37:18:be:40:9f:a0:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.165.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6d:6d:b0:36:2a:3e:2a:39:52:eb:15:e3:ab:c3:e6:d9:a1:
37:0b:fc:4f:72:c4:e8:a3:e5:15:8c:7a:09:0f:70:86:f9:d7:
3d:23:58:b6:18:91:28:fe:07:6c:19:3c:d7:b7:e5:19:e8:f9:
e1:12:fe:8a:9e:f2:4d:18:d0:9d:a0:bc:59:b6:97:e9:54:34:
ba:07:3a:3f:2f:d7:39:25:83:92:03:06:ee:53:d2:8a:cc:15:
cc:70:16:f5:87:ba:cd:fe:bc:50:23:ec:53:bd:6e:94:d3:81:
18:f8:ca:0c:85:e2:1c:10:c1:24:4f:51:3c:5d:ea:8c:ee:56:
10:7e:52:e0:d2:89:f5:00:6b:1f:52:61:f9:34:46:b5:f9:48:
0a:c8:a0:51:de:aa:79:17:56:12:99:59:e9:44:78:33:08:0e:
96:c6:96:2d:67:20:f4:eb:52:3d:ab:19:72:12:df:c6:00:ae:
4c:c7:46:77:12:7e:6a:20:6c:68:70:dc:c8:c3:9d:95:b8:5f:
74:37:a6:26:e6:4a:f7:5e:cb:cb:c3:a5:7d:b4:db:17:4b:05:
ee:cc:f9:26:ae:ae:94:a2:bb:cd:ca:87:42:26:57:20:52:f9:
02:a7:29:39:d3:27:79:ae:f3:5d:0d:1e:99:cf:f8:7a:c5:ca:
5d:74:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:13 2025 by rpki-client