Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer (raw, json)
Hash identifier: v+PYui6H7k/CJC1qKgm+80dFFCLSW50uxtULZtjKlYM=
Subject key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B364D28105D85351472C0414F1F629
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.94.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:64:d2:81:05:d8:53:51:47:2c:04:14:f1:f6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:5a:28:cc:f2:1c:5c:ad:6d:31:dd:7a:89:
19:0f:77:c5:85:cf:b8:64:56:57:f1:20:ba:23:ed:
2a:17:63:55:e5:f2:f5:cf:00:4f:17:5b:fa:20:eb:
50:cd:cf:ef:a0:51:6b:71:3d:cb:4a:ba:23:79:99:
fd:ea:73:3f:6a:d4:f0:ab:91:99:36:84:01:e4:43:
f1:a7:24:bd:af:4f:37:fb:75:05:39:5e:0b:fc:a6:
61:90:33:7a:91:26:63:dc:1c:cf:cc:0e:ba:81:4d:
7b:74:1f:1e:12:43:ef:02:c0:0a:cf:80:5e:66:be:
9e:a2:ae:39:54:4b:6c:03:d7:0d:3b:fe:30:0a:f8:
34:83:3a:b8:2c:e7:de:c5:b4:2a:e7:ae:bb:34:e5:
13:b2:f8:39:ef:9b:28:a9:cb:b2:ff:a3:62:57:a3:
8a:fc:0e:66:54:f1:18:68:19:73:d7:5f:57:d4:0d:
93:11:50:f3:7e:82:57:18:9e:b6:d1:78:48:c2:cb:
52:d3:bc:a5:c7:b8:a9:b1:9c:c4:b0:31:29:a5:06:
fd:ff:22:97:91:9e:b3:72:51:cd:6d:33:46:43:5d:
32:e7:19:53:f3:eb:e4:39:81:54:21:fd:a5:ec:e9:
97:75:ed:48:bd:2e:95:43:5d:5e:9a:38:58:56:90:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:30:7c:0f:20:52:5e:87:0b:e9:a2:99:7c:69:ec:87:a1:12:
62:f1:19:ea:32:c7:5a:d0:3c:5c:3a:b6:35:2a:35:1c:6e:55:
c9:57:2e:1a:94:a5:41:4a:c9:58:15:c8:cf:65:80:74:d3:45:
d0:fe:39:9d:34:3b:63:54:ba:d9:90:d5:55:4b:9f:f8:88:05:
f1:b4:6f:b8:26:0f:e8:ca:12:d8:98:99:15:5d:4c:33:45:77:
19:5c:a2:f6:d4:ad:c8:64:30:6c:45:70:56:da:1e:72:26:c5:
9f:ba:52:75:91:be:92:73:a1:68:2c:69:29:05:b3:3e:1a:01:
19:22:13:86:1e:45:99:5e:ef:d7:df:a4:ed:e9:e9:69:a6:80:
4f:0d:d3:0b:86:80:8e:c7:5e:fc:22:99:e5:92:4d:06:36:00:
c0:b0:60:28:67:b0:5f:7b:82:71:26:81:be:f1:a1:e9:87:92:
3b:4a:18:fd:f3:19:96:0d:b0:73:a1:b7:70:db:52:eb:2c:42:
b1:97:45:3a:ac:29:a3:01:d7:96:0b:97:fa:2e:1f:ec:28:35:
1e:e8:cf:8c:95:c3:d5:c2:4a:ff:a2:9d:42:12:9d:d5:f2:26:
ce:22:81:f8:11:38:eb:22:66:bf:1d:91:21:30:a4:f7:4a:98:
9a:26:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:51 2025 by rpki-client