Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
File: LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer (raw, json)
Hash identifier: Kp12yvUo6iRVtahir2up41KX6ZKtjckgHaPkeKSURWw=
Subject key identifier: 2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB108D6E9D332C5682973AC1C1806C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.52.27.0/24
IP: 2a12:9600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:10:8d:6e:9d:33:2c:56:82:97:3a:c1:c1:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:63:47:ff:1e:2f:1a:03:ff:b7:a0:16:77:
5a:54:ac:ff:0f:b9:b2:34:e9:06:ee:c4:bc:56:86:
92:78:50:7c:69:89:48:ff:de:84:e8:6e:93:84:0b:
b9:b6:47:9b:bb:45:83:74:f4:59:93:bb:1f:4b:0b:
85:e4:c8:c6:94:68:ea:48:da:26:8e:9a:d2:94:da:
35:d9:7e:49:2f:63:8a:b5:9f:d9:2c:e8:85:1b:0d:
59:80:ca:4c:92:2b:b5:3f:fa:0c:22:30:c8:22:a1:
f6:2a:74:3e:5e:ae:14:bc:70:84:94:60:91:b0:26:
8c:4c:27:8e:3c:c9:f5:f7:f7:d3:b7:44:ad:b7:30:
fb:e5:11:4f:ca:28:88:a1:18:47:72:6c:3a:29:75:
2d:e9:00:93:71:c5:a9:38:76:89:63:0c:b9:f7:b7:
fe:e4:b0:6f:15:02:52:20:52:ce:2e:87:b9:b6:a8:
8e:1a:dd:d1:b2:e8:0d:1f:95:5c:92:c1:90:fa:de:
d9:81:f9:00:07:26:f0:a7:b9:ad:b7:e0:2a:39:66:
71:9b:7f:e7:a8:64:74:9d:56:85:46:21:87:b9:e4:
62:fd:8f:71:15:c2:c5:a5:a2:3c:9e:b6:ec:bd:3f:
cf:56:16:8c:88:73:d3:5e:46:c7:a8:bf:49:1a:bc:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.27.0/24
IPv6:
2a12:9600::/29
Signature Algorithm: sha256WithRSAEncryption
71:ed:f3:be:85:23:53:d9:f7:7e:85:3c:63:3f:fa:81:b6:28:
52:ec:d6:43:ea:c7:e7:c6:b4:78:08:ea:02:00:48:83:7a:e9:
f8:6f:16:aa:b0:16:ff:c3:25:5f:a2:0f:11:50:84:44:99:65:
d6:86:12:db:c9:5e:a9:a3:b0:92:3f:9d:d8:f5:76:da:20:dc:
b7:73:f9:20:f1:7e:cd:75:49:ed:10:f5:83:8d:d3:15:84:f3:
37:68:70:c4:e5:fd:c7:d7:05:b3:d3:25:c3:22:bb:da:19:7f:
79:a3:56:9d:72:c9:f5:fe:7e:b5:2e:6c:ab:49:a6:23:6c:d4:
c9:3e:45:c9:09:35:76:cb:ae:a2:c4:8a:50:f1:ec:65:b9:8f:
6a:82:69:90:3a:26:53:23:d0:38:85:5e:9f:12:6b:65:74:26:
c8:5e:dc:19:65:5e:af:81:78:fc:b6:02:41:fb:bf:bb:8f:19:
73:be:6e:74:8c:5b:8f:da:d4:b3:42:97:fe:12:90:27:51:e1:
53:11:20:83:10:08:35:e6:2a:ac:82:ee:33:c9:ac:87:99:43:
f8:df:28:a4:8b:9f:ad:e4:1b:5a:10:0c:47:0e:20:39:4b:0a:
ab:b9:e3:8d:a4:2b:ab:79:13:28:1c:13:99:27:8c:d7:73:69:
9b:5e:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:55 2025 by rpki-client