
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AvfKoRcmIoJUFbrOPyHU4evBM6Q.cer
File: AvfKoRcmIoJUFbrOPyHU4evBM6Q.cer (raw, json)
Hash identifier: LylYmatsZPz6gxIDVbkT38ZpH7nPbZUYKmZ2akzytLE=
Subject key identifier: 02:F7:CA:A1:17:26:22:82:54:15:BA:CE:3F:21:D4:E1:EB:C1:33:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A51B862D78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:58:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.254.0.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709131382136 (0xa51b862d78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f7caa1172622825415bace3f21d4e1ebc133a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:2a:c1:70:6e:26:36:14:de:b4:73:62:77:
24:c3:2d:54:b3:85:fd:1e:ed:93:ae:6b:11:94:31:
e5:40:2a:01:ea:b5:a5:bc:ae:39:66:72:82:fe:68:
6b:e5:b2:66:3d:b6:c9:6d:bb:98:35:6d:8b:73:5d:
59:9e:ea:10:39:86:4c:8f:e9:47:0e:70:4f:c6:b1:
9f:aa:07:17:20:89:2b:97:d4:4f:1f:cb:ab:24:5d:
d8:eb:6f:2f:4d:b3:08:28:14:07:51:b8:98:59:11:
32:99:fa:4b:1c:f7:5a:ce:39:b0:ea:12:18:23:96:
25:fa:88:15:56:22:4d:59:7d:6d:d0:98:ab:d5:5a:
69:64:b3:17:84:6d:7f:6a:6c:10:76:68:16:b7:59:
e8:7f:38:54:68:59:0c:35:c1:2a:a8:77:af:ac:47:
72:f1:90:9b:72:e8:bb:69:19:ef:32:5a:df:23:6b:
7c:ad:27:b9:d2:44:ac:d1:1f:a1:2f:60:ed:22:25:
b0:ec:fe:33:8d:90:3d:a8:44:07:7a:db:29:65:46:
32:2a:7d:38:ed:0e:9d:ab:0c:0b:74:5c:fa:df:fc:
2d:9d:6b:40:4f:ca:9e:96:41:4d:67:e0:43:62:6d:
af:2d:d2:42:17:b0:b2:35:c9:76:ca:f5:36:c3:c7:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:CA:A1:17:26:22:82:54:15:BA:CE:3F:21:D4:E1:EB:C1:33:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.0.0/22
Signature Algorithm: sha256WithRSAEncryption
66:73:0e:31:2b:be:26:9b:5a:48:6e:0d:79:5d:0e:99:09:47:
1d:f4:a3:ad:81:1d:89:45:f4:38:d5:c0:80:59:8e:13:26:f5:
37:50:3b:7f:69:27:2a:7c:cf:c3:93:a2:7f:b3:f6:97:34:18:
6a:b8:e6:70:07:ed:02:02:c6:93:c7:16:c2:ef:94:b2:33:dd:
84:17:67:a3:b8:a6:8d:23:c1:8e:d0:d7:a3:42:d6:eb:8d:40:
a5:42:82:6d:38:01:54:22:a6:7a:37:7f:6e:d1:84:34:74:b4:
66:73:bb:81:df:58:22:a8:a7:02:2c:3c:53:ea:b3:82:dc:56:
99:4e:c0:7b:87:43:f2:b7:62:ee:79:96:ca:cb:62:53:f8:4c:
30:70:e7:13:71:24:15:b9:e7:8b:94:ea:23:24:45:26:b2:84:
1d:5f:89:2f:37:83:d4:30:4a:3b:ee:83:02:cf:ff:30:ec:60:
69:40:38:fa:05:fb:f2:80:11:59:c6:fe:d0:d7:55:df:ae:31:
98:e2:e8:1d:69:7b:1e:f7:e7:9d:cf:ff:66:75:67:2a:59:84:
1a:66:ce:b5:49:b0:b6:40:26:6c:4d:21:76:3d:8a:76:d2:d4:
12:7d:ba:c1:cc:22:ca:14:e5:31:7e:8e:b8:8d:c5:64:5b:d8:
fd:55:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:11 2025 by rpki-client