Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer (raw, json)
Hash identifier: 2C95NoMnBRcfkbwwVV6LcRee1sP/8nWy0p0Za9KZnvk=
Subject key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC3A55BB5DB07FFDF1333E72D69319
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.228.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3a:55:bb:5d:b0:7f:fd:f1:33:3e:72:d6:93:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:79:1a:c1:9b:2e:a1:5c:09:21:9e:ef:5c:
1a:94:c5:6d:68:19:1d:a2:fb:6f:a1:eb:4c:77:e3:
21:17:9c:51:d0:bb:18:c1:ba:b4:52:d9:93:15:b2:
93:12:d5:09:b1:8f:08:26:51:84:73:f8:53:bc:68:
2b:dc:6a:a3:fc:23:c5:c6:ff:ad:d8:5c:02:43:45:
d4:0f:2d:8f:0f:a7:a0:18:57:7d:44:d4:74:83:6d:
d9:30:4e:6d:df:8e:e3:74:85:a5:fe:a4:ee:f5:c3:
1b:35:0f:29:f3:18:94:5b:d1:8a:eb:be:77:82:50:
8c:9a:20:0f:c5:62:50:52:7e:77:0f:2a:d2:0d:8e:
41:88:0e:cb:67:74:d9:9a:05:d5:59:a8:0f:ab:5b:
01:8a:ef:91:1c:85:d5:3f:39:3a:0f:cb:ba:a1:7f:
90:32:7f:f6:20:88:50:b1:78:e2:11:de:1a:58:47:
6e:dd:74:ef:82:f4:2f:b0:a7:a5:d7:4c:36:5e:0d:
c6:9b:d3:fd:5b:5a:60:a9:0a:a2:26:74:72:4f:9c:
d5:d8:e7:1b:d2:af:54:4a:54:dc:10:b5:45:01:b4:
3b:c1:3a:5d:9b:be:e4:48:ec:65:bc:73:cf:75:1b:
e0:17:45:a5:1d:76:08:cb:88:11:a8:09:b7:60:1e:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
44:b7:9a:f7:0e:bf:ab:5d:6e:0c:42:29:8b:31:b8:9a:ab:5c:
b9:0c:ef:dc:ff:c6:fe:1a:34:34:6e:e8:7a:28:a9:2a:be:81:
64:bf:0f:88:a3:1f:80:84:93:0e:3c:c5:09:31:d8:83:ca:31:
5e:71:37:56:a1:48:0b:c8:8b:95:21:32:74:ec:3c:1c:bf:1d:
60:f0:21:dd:26:07:bd:c7:07:df:6a:73:69:b2:b6:a7:d2:5f:
fd:44:fe:76:91:90:22:c1:12:9d:c8:00:33:11:ad:9f:df:e8:
25:4a:ab:bb:a9:ce:f1:bc:40:46:41:f3:b0:ae:17:12:87:09:
38:a3:f7:a5:a1:40:48:a4:67:11:ae:f4:ed:9a:83:9f:56:4d:
f9:bd:71:83:06:ee:4e:6d:98:71:27:86:fb:81:0d:e0:ba:71:
93:e2:be:27:3f:96:7e:06:b5:65:9d:61:79:dd:41:38:7d:2b:
c0:79:9b:53:39:0d:0d:58:7c:46:34:f1:4d:a7:3c:00:2c:c5:
7b:b5:aa:7e:0c:58:e7:c6:93:57:70:89:ef:f2:25:65:e4:c2:
9f:95:64:08:8d:e1:8c:f2:b8:b3:4f:50:96:8c:28:e3:d5:ca:
a5:53:40:fa:f1:4f:bb:98:54:a0:b9:85:97:69:8d:e6:7a:85:
33:dd:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:51:33 2025 by rpki-client