Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer (raw, json)
Hash identifier: TPLFh9Z8rF5IUk3EYOqUIlWumMYucKxzzu4Eml0Y/S8=
Subject key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F3471EEDBF90029D7BBB3F6DA5489
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 188.65.161.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:34:71:ee:db:f9:00:29:d7:bb:b3:f6:da:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:a2:be:02:b5:5e:b4:7b:9d:8d:f7:8d:19:
20:22:4a:db:39:42:cb:4b:51:a8:0e:ed:1e:66:3a:
d7:14:22:8c:62:46:24:e7:29:f7:98:11:ea:27:67:
d7:6a:ed:a2:5d:4d:d8:d8:9f:35:5e:53:a7:99:16:
bb:b0:8b:d5:66:b8:4c:bf:f4:16:94:bf:62:66:2a:
6b:0b:fc:7d:4a:ff:63:b0:8c:26:97:2b:7c:85:3b:
d6:8d:eb:aa:38:c0:a7:be:36:75:56:c0:23:f1:c9:
b9:5e:f3:54:49:95:fa:2e:59:7b:4e:6b:d2:45:ba:
51:80:ba:04:00:b0:ad:02:8f:97:2e:8b:44:08:9e:
f3:eb:a8:43:16:7b:15:d1:2d:51:ba:e3:7b:56:0c:
a6:3e:e0:7f:ed:ed:59:c1:d5:65:f0:8c:57:dc:ee:
9a:d4:d2:c8:69:b3:ae:d9:e4:45:61:5d:15:40:e4:
88:28:ba:45:db:00:24:f1:5a:95:ef:1c:db:2a:4c:
8d:1e:38:98:32:8a:98:40:c1:bc:c0:3c:c1:cf:ca:
b9:61:22:aa:fd:76:a9:7f:02:5a:3d:ec:a5:2f:0f:
88:50:9a:1d:4e:e1:81:f6:2f:a7:79:65:9e:37:08:
7c:ec:b3:26:e4:82:db:38:f0:47:ae:45:1c:1c:9f:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ab:6a:0d:a8:e8:2a:66:ae:0b:08:9e:43:37:ae:a6:89:33:
f0:ba:e0:fd:64:9d:48:d0:f0:a3:43:45:e9:7b:3b:ab:c0:d1:
29:de:29:72:6d:8d:54:51:12:e8:d8:2e:b1:ff:2c:46:22:4f:
86:b0:d4:ab:90:21:db:77:32:65:4b:27:f0:57:e3:92:1d:b8:
be:a1:c8:bd:ea:c1:24:8f:16:09:54:e0:82:88:eb:c4:66:b5:
32:07:fb:49:5f:99:ab:77:61:18:9b:d5:34:cb:fe:1c:49:e4:
97:20:68:54:78:1a:7f:32:81:53:4e:38:3d:6a:72:e0:a9:ee:
7e:f6:73:9b:37:de:35:9a:1a:54:5c:3f:cf:69:40:e9:8c:a3:
8d:c0:c6:fb:df:d9:4e:83:78:d8:cb:3d:63:e1:2c:c6:ca:72:
44:e6:d7:21:2b:e0:f1:90:49:64:9d:61:35:2c:6b:5f:3f:48:
24:c0:ad:4a:2b:d7:b1:ef:fc:42:95:61:7e:7e:2d:e7:65:2d:
40:49:c5:c8:c1:5f:f0:ac:4f:02:ea:3a:fa:5e:dd:5c:ee:02:
b4:58:97:fc:4c:4a:8a:5d:3d:79:7e:23:91:51:b2:d2:e5:a8:
36:dc:fc:b0:b1:6d:27:cb:c9:f3:e5:4e:13:c4:df:48:08:17:
ab:b5:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:40 2025 by rpki-client