Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
File: se4yDfBGSHfVF0XjFCMbVcg7aEU.cer (raw, json)
Hash identifier: UmDRMGjb0WpW9SuEL7anPzYLe4t9rrk39EOiCQAwqHI=
Subject key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420686678CAFC2FB3909A20C3059A9D65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.102.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:66:78:ca:fc:2f:b3:90:9a:20:c3:05:9a:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1ee320df0464877d51745e314231b55c83b6845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:3e:e8:82:bc:64:06:f9:af:a4:0d:ab:bd:
90:78:69:20:6b:53:dd:c5:e1:5b:21:e4:5d:6a:0c:
c6:b1:cc:bd:45:7e:ad:42:5c:1a:33:99:bd:58:cd:
65:0d:de:de:dc:49:b0:80:85:c7:20:10:88:54:57:
bd:b1:93:71:ae:e3:78:58:95:a7:55:1b:c5:f0:bc:
56:0f:ec:2a:af:32:9e:03:4b:52:d7:96:a6:f9:f6:
14:a4:fc:55:79:62:15:64:ce:0a:83:19:7d:11:38:
3d:a1:f3:43:44:ac:ae:f9:20:ac:c6:51:99:23:63:
90:e8:c4:8d:60:32:0b:fc:b6:34:4b:1a:d2:c2:a8:
2b:8b:2c:bf:f8:87:98:ac:af:c5:e7:1e:3d:2b:46:
ef:7d:4f:32:d9:98:b1:ac:f3:d6:e3:0d:a0:f5:1d:
ce:e1:8d:33:81:3d:74:63:82:f3:77:0f:95:4d:73:
1c:03:b6:04:be:a6:ce:56:e7:00:69:e3:8d:6a:7d:
33:d9:f3:78:f5:9e:35:97:a4:64:68:fe:35:d9:72:
fd:a3:e0:68:b2:23:91:28:97:3d:01:2b:48:eb:79:
ed:84:da:c3:06:b6:bc:1c:ae:6b:91:dd:e6:2c:82:
ef:0f:f1:4a:c5:4b:06:90:9a:19:83:cd:df:44:cd:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:be:df:5f:44:97:9b:a1:0f:9d:0b:4d:f7:e0:2f:a8:15:4d:
e2:c5:12:60:28:82:61:ce:d5:1f:4c:19:c6:60:f3:5d:f5:6a:
96:c6:45:57:32:f1:7c:48:a2:07:27:13:72:de:ad:8e:50:9b:
4f:00:3e:6d:d6:a0:c3:e9:16:b6:09:97:5a:bb:ea:56:ec:36:
dd:f0:ef:03:1d:69:2e:18:a4:26:8f:d0:d8:e4:be:c2:6d:99:
2f:cd:2a:fe:f9:b3:7a:88:22:2b:0a:ce:c0:15:56:90:86:18:
83:3f:a2:87:ee:e0:fa:be:82:4d:13:79:06:ee:a3:a3:01:83:
ce:44:e3:d7:b9:dc:f1:c0:3c:04:3a:02:ad:a8:47:43:d3:3e:
68:f6:90:f4:95:3e:ac:9e:9c:90:21:7c:40:1a:4c:df:8d:e8:
46:da:3a:5a:1c:61:a5:b0:72:fe:3b:1b:fc:8c:c1:b8:bb:ed:
77:2a:bc:3a:c1:59:9e:50:02:6e:61:06:31:08:41:ff:18:62:
7c:56:f0:9b:0c:a4:ea:71:33:e6:57:71:88:7b:f4:43:b2:af:
c7:0e:64:80:97:eb:c1:4b:5a:45:e0:fc:2e:43:f1:c9:cb:e1:
db:fc:99:f6:3b:29:9e:d2:04:bb:d6:b2:14:d2:2c:14:48:e6:
6d:89:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:38 2025 by rpki-client