Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
File: mZKB6H1em4dY8kDnju9xAsQBIYk.cer (raw, json)
Hash identifier: PPs4+G1NolFdchMj8Xaw8nQ+IXziGRU8ETr0+p1grKE=
Subject key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222BBAAA1524706F619132A4E925D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.54.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:ba:aa:15:24:70:6f:61:91:32:a4:e9:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=999281e87d5e9b8758f240e78eef7102c4012189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:31:9d:04:33:c0:06:da:ae:fb:d0:bd:32:
55:7e:da:6c:26:fd:69:c3:ea:76:ce:0b:54:95:29:
92:f4:ed:9e:e3:63:cf:3e:37:44:8b:96:77:97:04:
48:87:34:26:ad:df:3c:ef:14:a9:ea:e8:16:4a:7d:
d2:29:69:97:f1:b8:1c:18:d6:a7:f0:b9:8e:ca:68:
0a:0a:8d:1a:a9:84:11:fe:8c:55:03:df:57:cf:d4:
43:28:4e:5c:60:9f:0f:ac:74:60:cf:ed:84:d2:a9:
4e:36:9d:25:b0:c1:b7:e2:1a:24:71:3e:61:3e:42:
5c:1b:ab:50:35:07:08:77:d6:9f:52:82:de:6c:14:
64:49:78:22:5f:8c:00:a9:dd:4d:fb:1b:91:2a:e6:
50:01:ad:3e:5f:05:25:60:b3:94:d1:dd:da:91:4b:
32:26:ab:51:03:d7:be:6d:d1:c0:1c:4f:3c:6e:82:
7b:0e:38:b0:87:3a:2c:83:32:cc:84:c8:0a:92:6c:
f2:70:d8:ff:48:37:86:25:17:bc:90:3e:13:36:7c:
f3:f8:b2:1d:94:86:cc:77:de:6a:ba:68:2a:29:02:
67:88:9f:9b:e5:a9:87:76:90:be:94:3b:79:6b:57:
46:18:ad:d0:69:f0:57:48:ec:32:83:4b:1c:76:87:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:94:e4:51:d2:52:d4:97:dc:16:57:d6:fc:8c:48:f4:f9:bc:
26:9b:0a:16:f4:1f:db:99:bb:1d:92:10:2e:b0:19:28:54:7d:
d8:94:a7:6a:f5:ff:28:13:a7:e1:7b:6c:27:49:e0:c9:11:37:
b8:68:de:48:46:5b:6e:18:2c:12:65:3b:6d:90:c4:2d:59:da:
cb:f6:0b:d7:a3:54:9e:29:64:16:7b:95:92:85:09:13:cc:36:
af:24:aa:79:4d:3b:c7:db:1f:eb:d1:cd:ea:e6:82:2f:71:34:
75:c6:d0:49:16:f3:4b:d5:d6:86:2f:f8:82:1c:8f:d6:86:ea:
1b:f3:ea:cf:79:a4:c4:ab:cc:58:6d:5d:34:da:6c:2c:f8:9c:
ec:59:5e:61:63:83:21:06:f9:ce:43:0e:33:7c:d7:3c:56:f9:
67:12:6b:f9:81:cb:4c:98:17:0e:ec:75:99:69:cb:e4:18:c3:
a8:f1:24:1a:63:a2:d4:60:95:4c:47:ec:e9:f5:ee:17:bb:c4:
e2:df:88:e0:b2:a2:cf:8e:2e:34:b2:9d:04:33:f1:8e:a3:62:
f0:1a:11:87:fd:6c:8a:78:8e:d5:3e:d0:eb:be:7d:08:ea:ae:
21:a8:a1:fc:2e:4a:fe:e7:2c:0f:66:d1:64:3b:d9:7e:c9:5e:
49:d1:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:00 2025 by rpki-client