Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
File: 0seIZkHuEBvHspX9hvGSP8KD89A.cer (raw, json)
Hash identifier: uW+o/Wnl5d1Kb78i8UcZl76IyiP/IbaEOrak6eUZK9s=
Subject key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A0C5DFBB07E7856E2EBEA5A63D07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.119.196.0/24
IP: 2a14:3d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a0:c5:df:bb:07:e7:85:6e:2e:be:a5:a6:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:8b:e3:d1:0b:62:72:89:27:f6:ee:d2:cb:
70:98:7d:27:7b:9d:ee:0b:8f:9a:e3:36:fc:63:b7:
40:af:05:43:7a:b4:14:23:e2:6e:2f:e4:08:52:cc:
ba:8d:88:9f:59:3b:85:51:33:86:43:53:8e:70:6f:
e6:c6:68:92:c4:7e:8c:c2:b7:96:76:1e:63:0a:1d:
cc:40:5b:f2:4d:1f:85:8e:54:e8:1b:df:6d:14:fa:
d3:cc:cc:d7:30:20:58:db:f7:68:ee:48:97:f2:69:
76:9d:a6:29:1e:e6:f3:e1:84:9b:ee:49:8a:c5:4f:
8b:e8:df:4b:e9:99:c2:89:05:e1:5a:c2:ad:a2:08:
b1:c9:a4:59:e4:a5:2f:82:ee:94:e4:7c:21:ac:4b:
ea:1f:ba:32:0f:69:0e:bb:3a:34:96:ab:69:09:6c:
48:5f:b9:4e:5e:4c:5e:27:60:7c:74:e6:59:4c:bb:
4e:e4:96:a7:7b:c5:96:09:66:f2:58:9d:e1:3a:e2:
73:d6:cf:b4:f2:5e:13:a6:f8:a9:8d:eb:87:58:f5:
67:05:0c:17:88:4a:1d:24:4f:06:12:6b:58:5f:7f:
26:07:52:d1:3a:c3:54:1c:bc:22:c7:12:98:5c:ac:
c9:63:84:73:f3:c6:19:bc:bb:b5:e4:85:b6:7f:5b:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.196.0/24
IPv6:
2a14:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
69:5b:27:27:06:53:59:1b:64:69:c8:9d:d6:a0:7d:ea:a6:59:
eb:6a:ad:bc:7c:1f:3c:87:da:35:53:3d:95:8e:2d:ee:b2:db:
ec:4b:e8:7d:48:76:2a:de:7c:9d:32:0f:c2:0a:22:b9:57:f8:
0e:80:38:d5:ae:a5:8d:27:b0:d6:71:28:1e:23:16:d8:ef:1f:
ac:2a:5e:b2:05:51:9c:d5:10:26:b3:97:24:4b:ab:aa:0f:d1:
d7:1a:35:17:4e:b8:27:7b:cf:9f:4a:69:1d:53:5c:4f:04:f4:
5b:1a:3b:db:cb:22:5a:d4:4c:20:14:f4:91:34:66:88:ca:fe:
62:4c:21:08:4c:74:7c:4e:f9:18:7f:49:a0:8f:2f:ce:31:29:
fd:38:1c:6e:24:45:90:9d:76:1f:65:e5:97:1e:40:d4:15:bf:
01:f8:e3:04:90:a6:bd:dc:15:83:94:29:e6:2a:89:9a:45:23:
2b:b7:91:a1:36:22:27:b6:8d:71:de:f3:dd:79:4c:f7:84:eb:
14:7b:a7:f0:47:ca:59:36:4c:35:7c:1e:9c:b3:4b:3c:06:7d:
78:2f:bf:f9:10:7a:b7:3d:86:e6:a2:2d:17:57:3d:8b:a9:c3:
9b:37:d0:2e:90:38:4b:c5:1c:37:a5:fc:7a:c5:8d:5a:ea:05:
55:9e:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:15 2025 by rpki-client