Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
File: zXPyONls9npe_Aw3R2_TBgKa9VI.cer (raw, json)
Hash identifier: 1df4YHhawWIybWPzo7qRwYPQDJBYG798V5oCn+AqH9U=
Subject key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EC1B0092F5FE62F2F66D93CD26FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.91.112.0/22
IP: 2a05:ea80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ec:1b:00:92:f5:fe:62:f2:f6:6d:93:cd:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:79:39:eb:a1:e2:e3:0c:93:be:16:ea:01:
fc:b0:ec:56:e4:63:18:d3:a3:b2:94:e3:3d:21:5b:
a4:0c:26:07:6e:d8:de:57:c7:80:6e:3e:31:76:8a:
a7:b3:aa:dd:66:7d:86:da:eb:33:b5:b6:5f:7d:94:
42:5f:89:c6:92:bf:3e:e2:5c:05:0f:b2:4d:4f:6c:
fb:f3:75:f7:b0:b0:03:b3:bb:26:49:98:32:3b:04:
39:05:02:e6:af:91:6f:c7:79:82:39:36:8e:13:ad:
f1:86:9b:46:c9:2c:4b:31:3e:6d:e5:20:63:8a:2e:
4f:0c:1c:98:10:6f:83:10:8a:d7:65:97:de:d9:03:
42:a6:a4:df:a8:38:54:bb:96:76:a7:44:b7:9e:35:
7d:5b:23:84:3b:57:5c:20:6c:71:79:a9:50:16:16:
94:dd:31:f4:1f:8a:83:04:0e:77:d2:7d:b8:c7:41:
d8:b2:c0:4b:89:8d:3c:07:5c:c3:cb:53:5e:0b:55:
7b:7a:ad:21:e2:38:fc:fd:53:ac:9d:e6:84:3a:ac:
9e:0b:05:f2:90:39:c6:03:fe:d6:78:27:fb:8e:03:
ee:73:99:de:a4:ad:ca:ca:2a:9f:f8:8a:e3:99:98:
3c:a9:e0:06:db:12:d3:6c:fa:bb:9b:62:d0:a7:7f:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/22
IPv6:
2a05:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
ac:9e:34:fc:9a:55:af:34:6a:f0:e1:cb:e1:13:45:67:88:4c:
35:55:4f:0d:1b:1a:de:92:32:53:1b:0e:12:f1:6b:4e:02:44:
7a:4c:c4:25:2a:8e:b0:1e:70:f0:25:0d:c2:c3:c7:46:50:8f:
e7:d5:7a:d2:ba:f2:e6:c7:17:b0:26:a6:c5:98:ff:10:cd:1d:
76:6e:a0:e9:6b:85:a0:77:32:20:f9:85:2e:ad:4f:3d:66:2f:
04:01:87:40:63:6f:71:d7:51:b5:2e:c9:88:9d:e7:7c:ef:6c:
fb:9a:45:d2:b1:a1:35:f9:89:ba:08:73:25:9b:c4:11:03:5c:
6c:48:48:3d:3f:02:15:3d:56:3c:ae:fe:c1:00:1d:8b:b0:4c:
4c:21:19:8f:37:74:79:b6:b1:7d:e3:38:d2:43:20:56:93:63:
8c:b6:a4:07:6d:ce:73:4f:28:b0:cc:1d:82:32:eb:10:2a:97:
b0:44:62:f2:1f:72:36:03:ea:d6:cb:89:b5:a1:4e:41:7c:e7:
63:ec:4c:13:88:2d:27:be:bb:cc:74:ae:f0:e9:c5:3e:0d:10:
99:8c:83:29:03:b4:4d:74:1c:2c:fa:8e:cb:12:e4:f1:a2:4f:
23:87:94:d3:3f:d8:80:02:2b:96:5d:b6:ce:86:4a:53:be:5b:
7d:48:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:08 2025 by rpki-client