Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
File: jolfHicMY17GHfmpf8D2aMCo9Ug.cer (raw, json)
Hash identifier: +yVDa3EY2pYk5kb+R7zLU8N/HkRV2eHpMrFqLZrFses=
Subject key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252232B798717E75A35DFD757B093453
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.33.114.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:b7:98:71:7e:75:a3:5d:fd:75:7b:09:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:ca:b8:e8:bd:2a:b3:ea:c7:a1:62:13:1c:
cf:09:54:33:50:5f:24:a9:d2:e3:d7:b3:32:00:3d:
b6:ee:d3:b6:08:83:b2:79:f1:20:5d:48:c9:1d:8e:
86:11:76:81:41:70:6b:5d:e0:62:c5:e6:bc:72:86:
6a:a0:55:8a:dd:d6:4b:3f:1b:3a:47:62:d5:07:9e:
fb:88:78:4d:7b:78:40:a5:ca:a1:5d:af:06:15:a5:
86:42:21:ec:4e:4b:b2:c2:55:38:b6:ce:57:67:56:
e8:8c:a2:9c:4e:ed:c2:b1:19:ba:6c:51:20:fe:3c:
6a:4c:c9:34:fd:44:3d:4a:57:a3:1b:0c:b6:83:b2:
42:d0:31:7b:5e:15:21:83:f7:c2:9b:2a:f5:e4:80:
47:c0:b7:fa:f5:14:17:5e:ef:2d:a8:d4:60:bd:e6:
04:07:88:33:91:ba:8e:de:1b:29:cb:0e:f8:a5:01:
48:14:28:ee:e0:36:ac:61:15:e4:27:35:f7:af:21:
ce:69:54:3c:83:ca:80:fa:cd:1e:c8:ec:59:b8:e4:
27:51:43:0a:76:81:d5:dc:4c:c1:c1:5f:e5:74:67:
d5:52:fe:90:98:c9:3a:dd:37:58:bf:b1:ed:45:ff:
a1:f6:19:a7:51:45:6a:52:37:78:be:2e:f2:2c:07:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:79:05:0d:dd:fd:b3:2a:52:94:0b:fb:8b:ec:7c:04:40:d4:
2d:89:5e:48:8c:45:66:22:22:da:62:75:99:46:77:94:72:66:
15:71:a3:ac:45:27:1c:21:ae:6f:9c:d4:20:6e:0c:35:df:0b:
09:50:a0:73:71:16:f0:5b:8e:48:35:ee:1b:9d:09:65:2c:e1:
5e:9d:cc:41:e7:ab:99:10:bd:3e:f4:5d:a3:de:70:df:ef:c9:
a5:2b:31:2b:c3:a5:3b:19:34:64:d7:11:f5:d1:1a:84:4f:69:
5f:77:a5:26:bc:a2:38:2f:f0:aa:0b:21:23:ab:11:68:13:ce:
fb:dc:c9:62:a0:27:83:e5:37:b6:44:2e:80:0a:87:de:85:f9:
b8:9e:e4:0a:0f:d7:43:10:ac:ef:02:de:1c:06:3c:9e:7b:cf:
c3:5b:84:b3:f0:ad:2e:fc:11:cf:3b:0f:80:34:e4:84:33:9b:
5e:cf:56:ef:40:20:1c:c4:ca:00:49:0a:bc:e9:d6:d5:1a:0c:
0e:d6:39:d2:fc:9e:a2:06:a6:c8:bc:e7:09:7b:e1:b9:61:af:
5b:94:35:7d:ca:13:72:22:05:2c:42:0f:90:2b:9a:73:a7:c5:
f9:db:3a:9f:b0:0d:3c:e0:74:67:ab:67:b4:1f:fe:8c:68:b0:
e2:ff:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:45 2025 by rpki-client