Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.cer (raw, json)
Hash identifier: JNCjFG1225w6iXSBIaAc+oYenUjRV+PR/o43u1oqyio=
Subject key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067CF00F9B6002FEE5AD248389A502D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.109.237.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:00:f9:b6:00:2f:ee:5a:d2:48:38:9a:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:b8:74:8c:96:fa:d6:d4:c1:ce:5f:8b:47:
f4:22:12:84:e9:f7:dd:c8:dd:14:65:27:65:79:de:
49:0a:02:5c:38:d0:98:d2:60:96:9b:4f:69:49:a9:
66:2d:d1:4c:b7:0b:a7:cf:99:7d:e0:a1:9b:53:9d:
89:ee:52:de:be:11:b3:6e:2c:4a:63:6a:06:15:32:
80:20:99:eb:e4:e7:f4:65:de:c8:0d:c4:50:8d:c1:
98:1d:5f:3d:91:27:b8:fa:24:f3:40:f3:df:1c:9e:
3d:19:b3:f1:7a:18:25:07:90:cf:13:18:a3:45:35:
08:30:8c:ee:38:86:b6:05:87:68:34:ae:82:c5:46:
5b:dd:dd:6a:b1:8a:10:89:64:eb:2e:93:f0:d5:c8:
b6:69:b9:21:a5:a7:fa:93:47:20:27:68:68:3a:6e:
fa:0b:77:03:05:68:47:59:81:1d:c6:cf:9a:ee:d9:
f2:49:43:02:f4:66:a8:7f:7a:d9:b0:97:33:cb:36:
8d:26:7e:19:19:58:f0:cf:bb:51:f8:8d:38:68:d0:
b8:45:54:1c:ba:31:9f:e4:56:74:29:d0:cd:7d:38:
cf:f2:d6:31:90:46:4e:db:5c:38:5c:7b:0a:64:16:
c0:39:ce:41:55:90:d9:0c:ab:5e:2d:90:20:3e:59:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.237.0/24
Signature Algorithm: sha256WithRSAEncryption
73:de:8e:58:df:59:4a:52:27:4c:4e:df:b6:43:f1:af:42:d7:
71:e7:06:db:bf:b1:9b:42:72:21:97:33:b7:6f:8c:cf:14:b7:
43:91:15:83:e5:f7:97:0e:f1:8b:e5:a1:ef:8e:7f:33:9a:cc:
b5:47:a8:a1:dc:95:3c:a0:e4:51:61:7d:47:14:41:8b:92:6d:
b3:99:d3:37:4d:80:d4:8d:3b:78:ce:9e:1c:06:2d:17:fe:f7:
68:6c:01:15:d8:2e:48:57:9f:8f:e0:d1:ae:f5:e8:c9:cf:dc:
fa:fd:85:58:96:66:31:4c:1d:da:bd:f8:a9:b2:dd:9f:84:27:
4a:fb:c3:b7:68:71:20:dc:d2:70:81:9a:ba:fe:dc:fd:2a:f3:
4c:e3:6e:2e:ae:f2:55:b2:90:79:91:23:fd:af:93:88:2d:42:
ed:fd:99:4c:61:cc:42:c0:b4:67:47:40:56:0c:06:34:04:ec:
24:34:3a:cc:c9:ff:20:d4:c5:7a:f9:ff:ae:56:44:dd:d6:86:
d9:e8:59:59:c2:e2:e1:9c:a3:1d:95:e0:d8:90:b3:24:4b:05:
34:87:58:57:48:51:f4:06:d2:bc:a2:7b:fc:6c:69:d0:44:55:
54:cd:8c:1a:69:1c:c4:38:51:61:ae:42:9e:3b:7c:fa:79:53:
8a:64:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:32 2025 by rpki-client