Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer
File: 1mHWCkcyZzg-yD8rccCO9DknpPk.cer (raw, json)
Hash identifier: gBSNkKy5VOkDodBm9f3sYsShkRWWS+AWkfMu1S0LLEA=
Subject key identifier: D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6370BEC4F6BCD3CC23D747DDDC2C52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.222.214.0/24
IP: 2a11:a800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:70:be:c4:f6:bc:d3:cc:23:d7:47:dd:dc:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d661d60a473267383ec83f2b71c08ef43927a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:c0:21:b3:63:7b:59:8b:da:e4:69:4c:99:
38:ab:94:ad:74:3b:23:46:76:b7:74:5e:fc:c0:18:
31:11:5f:50:42:d0:85:96:d2:5f:6b:2d:3f:cc:c9:
33:56:da:f9:29:19:e2:07:5f:18:67:cf:34:5c:aa:
31:b1:91:47:28:4c:56:5c:3a:ba:74:79:e7:a3:10:
77:45:09:aa:30:3d:ff:64:3d:a2:7b:07:32:b8:92:
1f:e6:72:77:90:1a:5c:07:24:c5:c5:ca:3d:30:8e:
43:08:64:42:c7:7d:7a:fc:4f:15:f6:67:d6:dc:f2:
d4:85:00:9f:1b:59:fa:d5:a8:2f:dd:4e:44:e5:ac:
ff:c4:62:9b:d4:5a:52:8a:cd:7e:69:b7:e1:58:a6:
2c:d4:e7:06:96:0b:48:52:9e:f7:8c:d9:8a:8b:75:
0a:76:14:24:8f:b2:29:d3:95:b4:b0:28:3e:c8:c6:
87:98:7a:62:46:92:7d:a3:0f:e4:7b:b2:55:49:23:
7e:2e:43:b8:3c:3e:91:75:97:2b:f0:1b:49:07:96:
27:b9:dd:e3:f2:ef:72:f8:2e:20:6c:be:98:6f:c0:
ff:96:bb:e1:ca:ac:7c:df:21:23:ad:b7:11:29:81:
2a:75:ee:b2:aa:c6:3a:6c:c7:08:e8:e9:ec:49:fb:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.214.0/24
IPv6:
2a11:a800::/29
Signature Algorithm: sha256WithRSAEncryption
ae:a7:8c:c4:2a:a2:20:fa:18:f6:e5:c4:2c:b8:e4:39:35:ae:
eb:33:f2:0d:b1:33:b5:ba:d5:ec:67:21:18:54:5b:2a:b7:b5:
66:70:63:37:3d:d7:31:7b:95:8d:0c:63:d7:e2:76:24:ef:27:
76:7b:e3:4e:e9:aa:fc:5d:80:ee:8b:13:14:df:66:d9:47:68:
e5:99:a6:91:d9:3d:23:5a:5f:27:84:58:ac:a5:1d:68:c0:52:
15:7c:e0:f7:25:03:e0:eb:46:c9:cf:ed:e8:07:55:48:22:6a:
c2:9b:94:69:b3:2c:c6:a8:22:ff:43:06:8f:92:ae:5b:6e:48:
07:fb:51:31:40:1a:27:ac:3d:81:56:3d:84:db:bf:26:f4:90:
62:b7:8e:20:fc:1c:fd:b0:fe:fe:68:97:33:cf:72:6c:cd:48:
37:db:f1:01:5a:b6:69:35:d0:3f:75:c7:12:13:50:c4:02:83:
e1:30:32:f4:86:ec:85:61:da:57:2b:d2:8b:18:cf:55:59:2e:
75:ed:95:27:1e:bf:d0:e7:00:b7:89:b9:3a:cb:80:3c:d4:40:
b5:af:e4:ea:40:61:ed:ca:6f:8e:c5:4f:74:b3:eb:92:e9:43:
ab:44:41:02:84:97:9b:a3:45:e7:6d:87:0c:01:5c:1c:50:65:
30:0b:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:00 2025 by rpki-client