Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
File: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer (raw, json)
Hash identifier: nFaYN4voP9CfW92OwXa1RNV0Y0NUaA3FUdLAfTLfFG0=
Subject key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C194C13C18340F89F5142954BC6F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.116.128.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:4c:13:c1:83:40:f8:9f:51:42:95:4b:c6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:36:b4:b5:59:55:eb:02:d7:cb:0e:78:2b:
6d:66:20:50:15:c3:18:0b:72:b1:b4:57:02:e3:67:
af:17:3e:d5:44:5a:57:2a:bf:93:04:e2:9a:28:b9:
8c:2a:d6:1b:04:89:26:cb:e9:c6:a4:15:a0:69:7e:
2b:44:04:50:82:4f:a3:b1:50:4c:3d:b5:c5:b6:fb:
8f:eb:19:92:f4:67:f7:5f:21:e2:81:68:b6:8a:39:
ac:65:b8:e1:ea:68:9c:84:db:f3:17:15:b6:b3:80:
c4:45:2d:39:e1:7a:65:36:93:80:7a:4f:86:58:6d:
c9:c6:e6:a8:b8:d1:6d:f4:c6:ee:48:0a:49:3b:aa:
00:04:b5:9b:6a:29:b9:96:a8:46:28:1c:fd:96:8c:
05:08:b5:c2:6c:49:ea:da:73:bd:30:3b:ec:e7:c9:
5d:03:7c:bf:e7:b9:3b:75:54:6a:13:ce:e1:aa:35:
ec:fe:0a:56:17:33:16:67:34:51:c8:b8:0e:cd:1a:
85:bf:2e:15:95:a0:ea:6a:67:68:df:39:1f:55:3d:
57:56:5f:3a:f1:35:b1:57:13:71:80:68:74:80:db:
5d:67:f2:69:67:54:97:a1:66:b1:29:1a:b4:bf:d0:
3f:bf:31:8c:8e:31:40:7e:58:1f:65:29:41:47:95:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.128.0/23
Signature Algorithm: sha256WithRSAEncryption
26:14:50:0f:28:98:2d:4b:13:2c:a2:f9:c2:2b:b1:f8:1e:4d:
7e:6f:34:10:75:7f:50:c7:aa:d3:5c:fb:fb:58:e2:89:7c:26:
0d:69:ae:57:4c:d2:26:3d:5b:06:d9:17:91:e4:78:23:2f:75:
b1:f0:5b:84:81:1f:e8:6d:1e:29:3d:05:67:7a:3a:6d:ee:b4:
ec:58:f9:0e:ed:61:d7:8d:35:fa:b2:bf:a1:ae:d6:59:cf:56:
6b:9c:19:b5:a8:61:94:66:f5:e6:a9:3b:6f:fa:56:28:cf:84:
94:24:8b:4e:df:58:cd:31:e6:80:82:6f:0d:27:2c:57:c8:6a:
2a:92:a7:f0:d2:8c:22:06:01:e6:f4:d8:05:7e:41:26:d0:03:
b5:03:70:62:42:8f:7b:18:74:4c:d9:a5:e1:a9:6e:41:3c:e5:
a7:84:71:d5:81:0d:b3:b1:7b:bb:98:f4:fa:fb:8f:59:4c:06:
ff:e4:62:08:6a:cd:6c:bd:16:93:26:b3:a3:26:c4:5a:4b:86:
72:71:a9:e4:5a:42:f6:61:a9:d8:de:49:11:ac:c9:fb:79:1b:
f7:fc:10:35:51:32:de:58:cb:3c:e5:8a:42:6e:85:d7:27:d7:
42:b1:0a:6b:5d:c2:c7:40:d3:73:f6:5b:a3:bc:73:af:27:90:
70:db:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:02:34 2025 by rpki-client