Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
File: qFOfk1XT63eLG7juJyMyYBGhIps.cer (raw, json)
Hash identifier: 1WRuz4taZJNruysrhd4l+YLrjuT9mmrsKbiY1hvwE/o=
Subject key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB8F4C6F0C1AAADCC4856EC9EC56C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 148.187.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:f4:c6:f0:c1:aa:ad:cc:48:56:ec:9e:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:de:2c:d8:53:16:de:5e:a6:a0:42:9e:df:
df:7f:17:41:2d:dd:b1:ab:aa:74:cf:28:b9:a8:c8:
f0:1f:95:2e:0b:6d:9c:f5:6f:44:29:d0:06:02:7a:
52:b5:83:dd:a0:46:50:d2:49:20:55:d0:77:88:87:
f6:32:2e:9a:4f:9c:2a:90:45:92:5c:12:00:ec:7b:
91:45:bd:28:69:57:e5:8b:3d:b5:33:03:a4:a8:39:
67:d6:05:5a:30:3e:da:78:23:32:e1:4e:ff:a8:e2:
c0:75:16:fb:8a:2c:1f:6f:5c:b8:a2:55:bf:73:06:
d1:f1:bb:5c:bb:9c:ef:89:3d:c1:84:58:a7:57:0f:
33:19:39:5d:9a:ea:76:fc:d4:07:98:f8:63:9e:99:
b3:c2:7b:5b:2c:d2:fc:e8:ec:06:77:9e:46:46:06:
33:19:a9:3e:d3:75:50:5e:c8:21:fd:92:f6:28:21:
d3:b3:95:bb:5a:f9:c0:90:a4:6e:16:2e:6f:89:d6:
22:61:ca:4b:49:9b:c9:1a:f4:0c:39:e0:dc:36:61:
7f:e9:3c:9c:7b:e6:f5:99:fb:8a:8e:47:49:84:38:
24:fd:08:08:94:86:c6:d8:f6:06:60:a1:7d:07:2f:
06:7c:74:55:95:a7:ec:f9:54:e1:a9:1a:a8:33:69:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:88:66:3b:75:e8:18:17:dc:27:40:e1:2c:51:e3:15:6f:ce:
22:b3:3a:a2:15:ba:7e:3b:d4:a3:e7:19:49:53:59:13:18:85:
fb:fc:52:5a:08:e5:95:b0:f8:03:43:2d:96:ab:be:dd:4d:2c:
61:85:73:9c:05:b5:44:61:da:bd:05:da:f7:cc:07:b1:77:81:
52:92:ee:51:f1:5a:24:e5:79:01:fa:4a:3d:39:05:8f:ab:01:
4f:ac:42:38:ea:da:a1:e3:ca:cc:ff:0d:ae:14:95:9b:f1:8a:
e0:63:e1:e1:8c:4e:cc:b7:87:b0:41:2d:1a:a8:6a:84:cd:99:
27:14:60:5e:ab:20:10:fa:c8:b8:38:1a:6e:ad:b2:51:db:bc:
73:0b:72:48:b6:c9:26:43:40:5a:ab:a2:4c:1f:69:df:06:ba:
9f:e0:cd:57:8d:ad:fe:e7:10:dc:92:6d:b7:b0:7a:b3:67:16:
f6:e9:63:0d:97:cb:96:48:3b:0e:23:43:45:f1:2a:1f:2c:e2:
44:0d:e2:2a:a7:12:ba:bd:e1:0e:6e:93:56:79:1f:8b:d2:2b:
7b:22:b0:04:c8:d8:00:d9:79:f6:98:ac:09:18:7b:fe:f1:1d:
d5:72:6e:0d:40:86:89:2a:6a:15:fd:7c:29:fb:ef:b3:a8:ba:
62:00:b1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:40 2025 by rpki-client