Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.cer (raw, json)
Hash identifier: wGFD5jEvEzgSzpw3ifQx3jRC0cYwWUt9dqhL2pOWsWQ=
Subject key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421441EC5CC9E3F02B41294D6B47B84EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.192.188.0/22
IP: 2a0a:30c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1e:c5:cc:9e:3f:02:b4:12:94:d6:b4:7b:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:cb:05:15:aa:93:b9:a7:d3:8c:9f:ea:92:e1:
52:ab:85:45:4c:4b:ca:36:87:55:d5:5b:49:2e:a2:
4d:21:56:7b:6c:65:6f:50:b9:5a:df:48:1c:77:6b:
dd:c6:56:aa:83:56:7b:99:85:e6:d3:f3:67:e5:49:
13:bf:39:1f:56:0d:de:7b:66:e0:32:15:a5:68:f6:
ec:cb:1d:70:bb:2a:58:d1:a0:3a:62:96:e1:71:d2:
a7:27:7b:16:7f:e2:8f:28:37:05:b7:91:26:10:7a:
2a:f8:8c:28:7c:0e:6a:6d:be:a3:87:68:f8:9b:58:
ab:a4:3d:25:87:cc:d7:5f:e7:89:f5:4b:ea:78:1f:
a6:be:ba:ec:6d:ff:c4:91:72:31:60:84:07:df:93:
b4:d1:4a:e5:06:b3:44:cc:b8:fa:de:47:c6:09:e5:
c2:4a:9e:c1:e1:0e:b8:e6:bd:45:46:0e:6c:aa:94:
2a:6b:0d:f1:c4:38:a8:d6:73:1a:82:45:52:6b:8c:
42:ab:8a:89:23:ee:a6:c7:bf:56:a0:2e:06:45:31:
cc:38:05:3f:db:05:9d:cb:f2:59:d4:c5:d2:d2:6e:
a4:55:67:22:95:20:42:e6:f8:6c:a8:12:fd:96:c1:
f1:04:e1:1e:62:ac:ac:90:53:c1:ad:53:12:a4:8e:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.188.0/22
IPv6:
2a0a:30c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:f8:b9:56:eb:77:83:44:ca:6a:57:d6:79:31:80:63:f7:61:
b9:d6:35:1e:e5:5e:23:25:d9:19:a9:c8:41:a5:9a:1e:da:c4:
6a:37:bf:71:98:fa:cf:64:96:ac:63:83:89:13:7f:e7:ed:ed:
e6:37:42:1c:01:02:4e:e1:26:a2:dc:3e:6f:b3:a2:ca:2c:44:
17:f9:85:7e:d7:ff:06:c5:9b:c6:18:35:12:17:da:74:b5:6d:
59:1f:35:62:94:03:52:d0:fb:48:11:09:2f:79:11:d3:c2:f3:
2c:3f:55:6f:44:6f:4b:21:50:1c:93:23:54:df:0c:05:59:d1:
6d:37:db:e5:49:41:de:32:d6:da:1e:74:70:87:42:49:02:c3:
5a:55:17:e4:fc:0c:f0:39:e7:0f:5e:88:6a:0a:ec:8d:dc:5d:
45:46:ca:32:c8:31:1f:01:84:cb:1a:ce:72:e5:bb:c2:b4:6c:
ef:06:e3:61:cf:47:cc:46:5e:cb:f1:bd:9b:02:11:90:dd:c4:
69:7f:60:93:eb:89:6d:ba:e1:53:0e:69:2d:d6:7a:a2:91:f9:
20:98:64:57:78:3e:02:31:64:91:30:43:b4:9a:2a:79:02:4a:
a8:6d:a5:fc:8f:8d:b3:35:f2:3b:44:92:13:f8:bc:8c:09:fb:
13:f6:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:27 2025 by rpki-client