Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.cer (raw, json)
Hash identifier: SqPl6dZIh2727LxuAZze/KZdmQfsW7rAOeurP9DdmSE=
Subject key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423690C30A371F09A742A9C0B9B0162FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.105.19.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0c:30:a3:71:f0:9a:74:2a:9c:0b:9b:01:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:47:50:fb:4b:12:de:8a:6f:b9:07:f6:ca:
8e:90:42:8a:07:7f:02:83:bd:a0:7e:9d:2b:b7:4b:
6b:28:c4:5b:4c:e2:39:d7:94:e6:da:ae:f9:62:b6:
55:01:25:30:bc:24:93:6b:0b:b0:db:4c:cc:e1:1d:
ec:a8:5d:92:2d:b6:48:6e:7c:60:f5:98:e9:d3:c1:
8e:99:34:a2:df:a2:dc:71:41:19:a4:af:bc:e9:42:
87:29:b0:dc:79:81:f4:91:1c:18:a1:d8:a2:18:46:
01:ce:c1:f4:2a:56:94:56:60:c5:60:53:28:a1:64:
24:8f:94:61:b5:96:b2:dc:d1:a6:de:bd:ce:ad:eb:
88:8d:05:a2:f5:64:61:2a:5d:ce:7a:57:bb:ac:aa:
d8:81:82:b5:5d:1b:b5:5f:e1:52:53:84:c8:99:d9:
dc:bb:85:d2:b9:b5:0f:b5:ff:77:34:3d:5a:7a:e2:
a3:67:bc:a6:94:1b:5d:0c:c3:43:84:5f:0b:92:85:
99:c5:6a:b6:2d:39:75:5b:a5:ee:a9:8e:e0:a2:34:
d4:c3:c9:7f:31:3f:d8:5d:f6:94:ee:bd:22:89:30:
50:e2:aa:38:68:2c:ba:68:c4:e3:14:88:58:94:75:
63:6b:ae:09:07:f2:a2:ec:ac:d2:b0:4b:81:28:d2:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d1:0d:d7:1a:60:e8:97:29:bc:4a:cb:9b:ce:14:fb:b9:37:
57:6f:38:d1:74:47:60:07:89:9b:fa:c3:16:c5:bb:77:d8:49:
b2:53:76:3c:cc:57:64:67:9c:a3:64:c3:3a:2a:6f:31:17:6b:
ce:ec:e4:30:89:16:38:e2:12:b4:bc:dc:bb:8e:c1:e9:a2:58:
ac:cd:fa:7c:93:de:7e:b8:e1:f5:1f:07:3a:69:b4:fa:ea:8e:
98:a5:41:52:f2:44:18:3f:6e:cb:65:8b:47:81:ab:d4:bc:32:
a3:01:82:3c:80:c9:e0:64:6d:7e:95:a8:e5:1a:a9:b3:38:68:
6c:7b:00:44:8c:2b:e1:d2:7d:22:ce:64:af:2d:5d:be:56:2b:
33:69:c8:d4:5b:37:74:b5:41:45:cc:e1:3b:53:40:1e:ab:31:
ee:97:74:ca:fc:c6:e0:c1:11:01:2a:35:b2:d7:28:ed:ac:df:
9d:0c:76:75:24:c0:b4:58:60:bf:a3:11:ce:a4:00:bf:71:23:
af:ea:67:6d:e6:7e:5d:9a:4b:2a:ed:a6:9c:cb:31:40:bc:77:
6d:19:20:e6:b1:d7:49:a4:3c:bc:74:af:d4:39:c3:11:a1:57:
94:06:e8:25:73:26:4a:d6:fb:df:62:d9:07:75:c5:b7:4b:2a:
31:86:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:41:21 2025 by rpki-client