Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.cer (raw, json)
Hash identifier: QlD9j5kenDuyxpVnHAkwPR+QRvRftazK+oO+VcYqO3o=
Subject key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446F85A6157F1EB4C35800733A7281
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.158.200.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:85:a6:15:7f:1e:b4:c3:58:00:73:3a:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:ea:ac:4e:ba:fd:f3:ab:d1:7d:22:4a:29:
25:ff:62:25:0e:76:85:c6:40:c4:2c:a8:7d:eb:3f:
23:f3:98:10:35:88:68:f6:e7:4e:9f:9a:de:a6:01:
9d:e1:a9:64:5a:8e:96:15:38:b7:41:bc:92:40:a9:
a5:d2:d9:ad:cf:0e:a3:23:dc:6d:c1:e2:29:43:26:
7d:ee:b3:35:17:32:3b:61:54:d1:26:7a:12:9e:86:
89:0f:5a:dc:20:09:fe:bc:6b:4d:20:4d:8d:61:a2:
9b:1c:a7:17:ac:5b:89:5e:03:a3:7c:7c:87:5c:08:
39:aa:b3:63:21:ed:fa:ad:6a:45:3b:b7:ce:15:e6:
df:da:07:09:bc:1c:81:c7:2b:22:95:09:c0:ea:0f:
8f:40:56:e9:21:68:d7:eb:03:1d:77:67:49:0c:ff:
0f:06:c7:2f:7a:c5:38:76:5a:f3:eb:99:62:fd:04:
3f:15:47:df:bc:90:c0:40:9c:73:e0:6b:61:a5:98:
a7:bb:53:f6:8e:63:9f:8f:52:28:e0:65:49:f6:4f:
bb:81:5a:90:66:68:b0:b2:f4:55:f8:7e:61:03:86:
4a:96:e8:66:1a:27:79:54:38:1b:78:0c:34:ad:77:
f8:51:31:e4:b1:ed:4c:87:9f:18:0d:2d:ac:13:1d:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:a8:0a:d4:b3:70:9e:8e:3f:29:9a:89:06:cf:75:48:1c:84:
50:ef:39:a7:7f:5b:28:c6:fd:1c:a3:f0:23:ca:7c:96:6f:31:
04:c8:8d:08:08:13:67:fb:e5:de:48:20:a6:74:05:50:8d:65:
29:c0:b3:c1:a2:1a:21:11:bb:68:70:39:81:9c:2c:26:12:df:
e2:66:fb:d0:a8:3e:79:bf:b4:bf:ab:78:36:91:ec:00:34:0a:
15:71:5d:a2:fb:18:4e:d7:f0:c3:cd:43:ec:69:c1:37:4f:1b:
1a:8e:c4:42:a3:52:e4:cd:f6:ce:e2:8b:07:5f:63:87:1d:12:
b2:3a:2b:3f:d9:a8:3d:78:72:a7:3f:8c:b6:d4:09:1a:a6:18:
8b:ac:f7:d4:6b:f3:28:44:53:a0:e8:d0:54:49:19:e1:5a:b8:
1a:0a:bd:b6:1b:16:3e:5d:68:f6:a9:97:73:6f:28:4f:a6:e7:
50:e3:f7:2b:e4:5a:b1:10:27:cd:a8:85:d8:5b:47:d6:29:bb:
af:44:ed:79:98:96:cf:08:09:d9:4a:32:5e:28:ec:bc:5e:91:
cc:86:52:46:98:c4:39:3d:d0:b5:b5:dc:29:c6:93:21:72:31:
e0:ff:bd:fc:59:9e:ac:ed:0f:60:4c:06:bb:6b:74:3f:9a:2b:
38:a1:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:59 2025 by rpki-client