Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
File: jlDZuD8_AVrYi_a3xShIZ0rly24.cer (raw, json)
Hash identifier: z4AlY3PFvHTkW6aJBPVjzJDlpUuUHLLlKHMUoCgsziU=
Subject key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C36053CBC837770AF1CD29EDC9A1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.193.53.0/24
IP: 2a12:ec40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:05:3c:bc:83:77:70:af:1c:d2:9e:dc:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:c7:fc:9f:aa:81:f7:a1:bb:45:54:52:d0:
b6:fd:64:d1:48:34:20:0f:2d:08:f1:21:34:bd:fd:
f7:c0:bc:5b:1b:ef:6b:8f:9c:50:d6:2a:32:7c:4b:
64:4d:b4:a7:a5:51:a4:d4:50:f3:b9:10:00:38:b6:
80:fe:11:cb:8b:6d:6c:2e:fb:4a:81:53:49:d5:67:
73:88:79:5c:98:fa:59:3e:3d:01:3d:25:85:a1:85:
93:64:7f:ac:fd:4c:8f:4e:0f:5e:db:0d:c8:63:1d:
05:76:a8:26:f6:d2:55:cd:74:56:87:14:f7:d7:89:
e9:62:d5:49:4e:cc:11:40:31:8e:8a:0a:3b:2a:30:
35:8b:0b:c2:28:03:1e:cb:7a:94:75:f6:d8:1b:ca:
d1:67:5d:2c:5a:86:69:6d:e6:ae:a3:72:fc:b2:a9:
cd:11:47:3a:46:92:11:d3:bb:1f:d8:74:9c:cb:4c:
92:55:00:b7:99:76:5e:f4:aa:8c:4d:a6:c8:46:06:
5f:26:11:82:69:a1:a4:07:df:7b:fa:40:6c:28:0c:
53:ea:af:d5:f3:de:3f:f5:4c:a0:b2:76:ec:62:04:
3c:bd:cd:6b:5a:d5:02:f9:45:80:32:c5:a9:72:64:
f9:c8:1d:f2:f3:7b:67:f8:3f:0f:09:35:63:df:85:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.53.0/24
IPv6:
2a12:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
71:80:4b:6d:b0:3f:dd:9c:fc:fd:e1:ca:d1:e7:f8:56:53:1c:
af:55:42:2a:5c:dd:e5:ef:4b:e6:30:79:e5:15:e2:44:a2:71:
3a:5d:93:32:ec:59:df:1c:ed:5d:2f:34:45:84:70:2e:88:2f:
95:4a:be:4a:64:55:e7:f7:b8:da:bf:72:00:ac:33:94:86:84:
b5:5f:7e:20:d2:2c:cc:05:96:fb:59:87:93:12:5d:eb:81:35:
0f:7f:dd:96:07:66:05:03:89:cf:2b:56:08:d4:04:ee:59:94:
b2:19:b0:85:ac:b8:d5:f6:2f:8e:33:9d:66:78:62:2e:29:5d:
c9:3a:97:33:c6:d0:4b:c5:04:4c:61:c2:b5:43:5f:39:03:13:
29:3d:52:43:1d:77:1d:7a:58:24:57:16:44:61:95:1d:98:50:
c8:35:d4:8c:f0:6d:56:b8:e8:71:2d:44:e4:44:47:99:13:9b:
27:90:c4:49:7e:3d:a6:c2:8b:19:09:9c:20:7f:c6:b8:49:08:
ca:e6:54:f7:50:de:78:e2:9b:f4:cf:a0:14:e2:3c:de:82:de:
27:b7:fe:8e:d7:59:2c:c5:c3:fb:be:f8:65:0b:51:8c:0a:39:
ce:2b:6d:76:8e:39:ea:09:bc:da:45:ba:71:86:5e:a7:74:49:
9f:a0:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:53 2025 by rpki-client