Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
File: 5BqMQuzom1-_whDce1VMcupPNUQ.cer (raw, json)
Hash identifier: hDUm/Cv5OR0sEWbH5QHnaGMy7wONS8Q27MJYT5nMqgI=
Subject key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AB17A47615E6B395F7B600F390E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57119
IP: 149.62.152.0/21
IP: 185.64.148.0/22
IP: 2a02:7680::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:17:a4:76:15:e6:b3:95:f7:b6:00:f3:90:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:5e:c0:5b:9f:27:d9:96:a5:5a:85:cd:84:
57:bb:ec:77:2b:b0:dd:05:3e:c0:73:cc:87:c0:15:
06:2e:d1:c1:60:11:a8:fe:83:05:0a:60:d8:5a:ee:
1e:c0:50:03:f2:66:9c:b4:24:2d:93:50:c2:d5:a1:
5a:d5:d8:2e:d0:eb:92:88:85:72:12:05:36:c5:90:
3a:ab:c8:e8:7c:2c:81:e6:b8:71:00:9c:1f:fd:d7:
4f:0f:2d:d0:ff:18:75:11:36:05:c0:78:af:36:90:
49:3d:ee:55:ca:d5:11:ad:01:e4:6c:ab:72:38:57:
66:54:83:22:d8:42:a0:0c:30:bd:61:75:27:dd:48:
a2:02:29:0d:2d:58:a9:69:23:c7:da:4f:62:70:a3:
58:bc:32:51:5a:0c:f3:e3:d5:aa:ec:8b:67:94:c3:
e7:69:70:78:d3:6d:9a:08:86:62:9c:9b:ee:f0:e1:
95:a2:f5:e5:36:44:3d:b8:8d:fe:f6:0b:17:7e:e4:
63:78:1c:dd:bf:90:86:04:45:ee:93:93:4c:56:66:
b2:c1:31:1f:11:a9:36:99:e0:36:0c:48:1d:13:48:
5d:ad:c3:44:51:97:da:2f:80:9c:ea:b1:68:88:9a:
bb:da:26:a5:27:4d:e5:e0:fe:1d:49:37:d0:97:26:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.152.0/21
185.64.148.0/22
IPv6:
2a02:7680::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57119
Signature Algorithm: sha256WithRSAEncryption
64:5c:e0:94:65:f8:ba:53:09:33:52:7d:4f:75:1e:54:0f:71:
7f:a2:20:4a:da:bf:1b:b6:58:87:92:db:b1:9a:57:bd:b0:2d:
ba:05:a4:00:31:8c:c2:cd:c5:e4:b2:f0:9b:57:80:7d:15:dc:
12:03:f1:eb:63:17:b9:aa:0e:46:6d:93:cb:b4:00:e4:67:ba:
e9:7f:98:c2:9b:aa:aa:42:9d:08:fd:57:df:46:7b:dc:14:08:
f2:cf:b6:9b:1a:df:00:6d:2a:f9:47:86:31:92:e2:ce:eb:9c:
7a:ad:23:03:5f:d6:96:bb:8e:5b:35:39:88:19:38:3b:3f:a8:
43:e8:e2:1b:05:75:05:21:cb:68:16:48:ca:2f:b3:0b:da:fa:
d7:5b:c8:e0:e2:a9:57:3f:8e:9e:1c:2f:d2:c3:7d:20:3d:f1:
f0:a1:d6:26:ed:aa:90:eb:99:fb:4f:00:c5:9f:34:3a:e9:36:
f3:9b:31:b3:a2:a7:0c:fe:d9:d3:1c:28:6a:b6:d3:6c:c1:49:
ff:4d:b0:76:b6:b9:0f:ff:36:70:73:56:b0:dc:4e:d5:d9:1e:
0e:bc:1c:6b:12:fd:91:f7:17:dd:43:31:9b:37:68:fc:2c:25:
a5:df:25:39:13:0b:15:e4:ff:e2:6a:88:2d:4c:d7:5f:51:3b:
30:1c:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:36:49 2025 by rpki-client