Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer (raw, json)
Hash identifier: xGCqtqFq/1e1tfjHF3rW9nvJahFZkjHerVYytKyeFAk=
Subject key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E365E464ABFFB03987960F52E8C10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.212.0/22
IP: 2001:67c:18c4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:36:5e:46:4a:bf:fb:03:98:79:60:f5:2e:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:0a:f9:64:6d:21:52:8b:96:90:66:df:04:
10:b0:f7:2e:6f:a8:b2:fd:22:42:cf:b3:eb:57:05:
d0:fb:4e:fb:36:23:b7:1c:a5:15:c3:3b:a3:71:dd:
63:3e:04:f7:62:1c:20:4f:68:f4:e5:5a:5a:f5:c2:
18:61:3f:33:5a:a6:06:ed:4c:7f:e5:5a:12:d7:d4:
98:8f:80:c4:32:4b:4f:a2:39:01:24:95:fd:8c:59:
76:4d:ab:e9:e7:bb:43:f0:96:dd:5e:46:74:f8:e9:
61:b7:7c:21:d8:e4:6f:0b:5a:65:d1:7f:f8:30:12:
d8:21:d6:65:6e:da:da:e4:9e:60:91:ae:d0:10:11:
bb:c5:34:13:30:a3:d8:be:b6:3e:63:94:bb:04:17:
71:e3:2b:cc:c0:a9:fb:78:c3:c1:b6:12:df:4b:8d:
33:34:dd:f6:17:8a:a3:e9:16:6b:a3:c8:ba:0a:a9:
ba:a6:bc:1f:11:0f:10:fd:4f:a5:24:50:80:d8:b6:
19:55:f4:d8:b4:f7:c3:6f:04:91:13:9b:d1:83:f4:
b2:d9:ec:cb:16:d4:2c:21:a2:32:3d:21:9d:b3:e0:
40:bc:ad:87:2d:cd:01:da:39:45:c3:cd:32:77:2d:
0d:84:96:44:f1:a8:40:96:f6:60:8b:78:03:89:36:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.212.0/22
IPv6:
2001:67c:18c4::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c5:5c:bc:3a:51:29:46:42:2c:bd:a8:fa:89:14:c1:e6:d0:
7b:46:14:da:83:0a:2e:ac:f8:70:5c:16:f2:e4:8d:7c:d4:25:
9f:dc:b5:fe:c0:0d:c3:b1:b8:3f:89:d1:a2:e8:2a:ff:50:da:
3e:99:4a:31:61:c5:d7:7d:3f:c3:8f:9d:e2:89:7a:01:00:bd:
53:c8:ee:5a:ed:28:16:27:8b:21:5a:0d:22:d1:77:00:43:d2:
78:df:ba:91:02:2e:0d:71:8f:a1:f1:f3:d0:9b:11:8a:6a:26:
09:4a:a2:42:3c:a6:cf:97:39:8b:12:ae:03:e7:d1:54:8b:c4:
62:f6:66:9c:83:dc:c9:8e:c4:3a:83:c0:09:82:52:7c:b1:2f:
36:d5:ab:8d:b0:6c:93:6d:0b:30:24:2b:8a:08:1a:0e:b1:04:
f8:57:3f:f7:d0:f6:69:fa:6a:d8:6c:24:73:b8:01:ee:61:e5:
a6:53:06:e9:67:7e:65:84:ba:6d:10:a8:24:45:e1:82:72:12:
18:b0:f5:6b:2d:37:c0:e8:a2:b8:68:23:ad:74:c2:f9:f4:ee:
aa:15:9e:c7:18:8a:82:a6:8c:b0:09:f5:e3:d6:39:4c:d3:0b:
8e:19:b5:e2:3d:a3:45:9d:5c:e0:cb:ab:bf:95:70:d8:92:cd:
16:ef:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:09 2025 by rpki-client