Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer (raw, json)
Hash identifier: fvhQ0ePi7U/p8EajXAjFtjYzX2YPeMBx7BiWb5AE9+g=
Subject key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B3EBA3D611F0A0ED7EF9E03E7305FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43356
IP: 77.92.0.0/19
IP: 185.208.108.0/22
IP: 193.201.128.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:eb:a3:d6:11:f0:a0:ed:7e:f9:e0:3e:73:05:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd82e60d072e5185435a900e323f463806d433c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:d6:25:38:b6:a3:54:b4:1f:60:9c:4f:87:
96:82:03:b0:3a:03:19:3b:2c:3d:a6:31:c2:2a:2e:
ac:c7:94:95:ca:b0:da:e2:07:f9:0a:46:20:51:5b:
43:24:a6:71:bf:64:51:e5:05:c8:92:7e:78:d1:b1:
47:35:6c:18:7b:28:c8:ec:da:55:b3:6b:16:55:aa:
38:56:7e:63:f1:51:49:13:63:2c:02:92:6b:68:b4:
36:2e:63:e2:c8:f6:38:5d:f2:b8:a1:a1:37:90:8c:
52:dd:cf:90:bd:40:15:1b:95:3b:21:7e:20:f6:5b:
c0:bd:9c:2b:51:01:84:0d:4d:5d:ec:c3:6c:f5:74:
ff:7b:82:c9:54:25:ad:6d:e2:96:de:9a:35:42:29:
97:e8:41:cb:70:7a:51:e5:8c:93:d8:66:c3:4e:52:
f5:9e:ac:76:b2:48:03:7b:79:d9:29:76:26:7d:ad:
00:ff:62:9a:b2:36:48:f5:f2:5e:3f:0c:51:b9:51:
bf:61:2e:6e:64:9b:e0:55:18:d7:10:5f:df:02:42:
cf:91:46:50:83:c1:2a:ad:f9:fd:ff:fe:28:31:ff:
f1:4b:40:a0:d4:6e:e9:70:4c:19:62:e5:d6:14:d3:
6c:26:92:45:1e:e3:f8:02:b7:6e:f2:22:19:79:ed:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.0.0/19
185.208.108.0/22
193.201.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43356
Signature Algorithm: sha256WithRSAEncryption
8c:1b:23:d7:ae:0f:e0:4d:21:ac:de:0d:f2:b0:e0:cc:b8:ee:
19:ef:dd:13:84:6a:6e:04:46:84:c1:4c:2a:cf:3a:d3:dd:27:
6a:7f:52:e9:9a:51:55:76:73:fd:58:1e:17:fa:be:43:30:9b:
4d:f7:4d:12:39:39:cd:95:58:47:6e:a6:8c:bd:85:3d:d8:34:
48:0a:65:e8:a8:ba:98:9d:02:74:f3:3d:d9:53:52:d5:05:7b:
8c:d8:4b:46:84:49:f6:2d:52:30:d5:ec:44:23:4c:d4:24:20:
57:22:ce:1b:6e:81:1c:88:89:2d:b5:02:29:92:e8:7d:e3:68:
ce:af:76:54:68:2c:6d:ed:d0:d6:e2:f6:0c:43:9a:a4:e1:48:
42:6d:df:6c:0a:ca:d0:74:9d:55:fa:67:8c:e2:f3:f2:a8:52:
54:93:b3:c9:cf:aa:07:85:fc:7d:4d:b0:19:03:f8:36:21:ac:
ce:72:df:3d:aa:5f:99:49:b4:46:86:11:dc:54:91:68:ac:5a:
d5:04:35:6e:53:c2:13:0b:bb:a0:43:6d:c9:8d:16:69:45:a1:
16:38:51:3e:f0:2c:ab:35:fc:16:5b:fc:79:15:0e:c0:ba:c4:
77:8c:30:fb:42:72:e9:36:a8:bf:a4:6a:5e:09:d4:d6:25:4e:
2b:6a:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:28 2025 by rpki-client