Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
File: nuVP2fF_yXpwpb9BW3iJGxW495U.cer (raw, json)
Hash identifier: TyXqFHidybulHFYa27csz76KvHdX5UKwZpDid4Zx1jg=
Subject key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2250F83877558B0DC1AB93B81567D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.32.162.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:0f:83:87:75:58:b0:dc:1a:b9:3b:81:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:33:59:23:cb:87:e7:2f:9a:a7:ae:60:9a:
bd:74:1d:2c:39:b7:aa:91:02:b8:2d:df:63:93:61:
db:fc:72:b4:23:1a:18:cf:90:a0:8e:50:c8:e5:d1:
be:75:3b:a6:92:af:40:09:f1:2c:94:57:91:7e:68:
5a:da:79:b6:7b:b8:c6:c0:59:b4:a1:04:4b:db:e2:
ad:e2:7e:b3:d6:28:3c:19:be:9b:cd:8c:cb:48:90:
c9:14:0a:06:1a:63:5d:66:ce:a0:63:b8:1a:fc:db:
74:85:38:ec:99:23:6a:ae:fc:e8:1c:19:19:34:41:
9d:df:c1:46:80:6f:e2:d1:68:68:a5:f6:d8:85:36:
fb:19:ad:14:71:25:1c:2d:20:a3:19:a0:e8:e3:1a:
78:f9:10:f3:75:5e:9e:b4:19:6d:8d:9e:9d:4c:7f:
11:bd:9e:d4:83:cd:41:b9:db:91:27:54:89:6c:1e:
7e:fa:9c:3b:1e:d3:1c:af:2a:4c:92:89:cf:c9:40:
4d:f3:da:8e:b6:47:0b:89:4d:58:7c:7c:0e:fc:f3:
9e:5b:cb:90:96:08:80:2e:8c:2e:c2:18:75:d3:df:
ed:52:07:fa:dd:12:c5:c9:51:27:00:0a:ad:3c:87:
dc:2d:8a:eb:7e:52:00:dd:fe:73:b7:7b:fc:23:00:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6b:7e:ad:cc:94:5f:93:98:f1:9f:ad:a9:e1:fc:51:ef:ee:
4c:67:25:e1:2d:8f:3e:11:6e:8a:47:35:0d:86:73:57:2f:35:
10:be:52:0d:9e:3c:ae:8b:65:c3:e4:da:fd:97:31:5e:a9:50:
49:fd:4e:de:76:71:ae:92:3b:7c:1a:3b:a5:05:43:78:75:89:
96:f9:62:6a:37:c2:ce:6a:ff:32:1b:81:0e:6b:45:b1:83:cd:
5f:3a:f4:aa:f7:89:f4:ab:a2:0e:89:7e:90:ca:9f:60:8b:52:
f3:83:5d:a6:53:7d:85:c9:a6:77:ff:79:07:86:da:85:cc:51:
50:11:7f:74:ac:4e:23:3b:84:9a:87:ca:56:f3:8b:c4:c0:d3:
91:a6:88:c1:e5:b1:07:47:19:11:e8:15:29:00:4e:0f:d3:ac:
5b:9f:4d:3c:8b:3b:d3:8c:66:a7:2e:29:5d:5c:9b:82:9a:33:
3a:f8:f7:43:78:5b:a4:5c:ac:85:5a:18:13:be:3d:90:5a:07:
c0:5a:41:7f:25:bf:01:8b:86:94:38:9c:86:4a:de:58:25:8c:
72:54:80:4f:85:30:ea:b0:21:34:2f:d5:49:cd:1f:ee:c2:84:
bd:f9:74:d0:af:fd:2f:57:d5:29:db:22:4e:5b:b6:be:0d:e4:
30:a3:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:36 2025 by rpki-client