Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer (raw, json)
Hash identifier: n/yRPowe3TAl2y8OmYKY7hDvYr1dKeofOgLf79K2OJw=
Subject key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019488E94029F6D83E5871A2EC2C00A757A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jan 2025 12:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.76.32.0/19
IP: 2a0c:b300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:e9:40:29:f6:d8:3e:58:71:a2:ec:2c:00:a7:57:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 21 12:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:ac:9d:4c:03:55:11:da:6a:1d:23:39:4b:
51:2f:f7:81:5d:07:32:af:45:9c:3b:ac:83:b7:71:
0d:77:45:64:b0:19:1d:05:eb:5e:89:a0:a8:89:26:
9e:6c:4a:91:e5:c7:ac:dc:55:9b:9e:2d:98:a7:15:
43:05:b9:6f:6b:15:f6:aa:b5:c3:18:fd:ba:11:18:
8a:9f:80:6b:11:7e:65:31:86:e4:96:53:71:d5:2e:
12:0b:54:83:51:1f:fe:35:75:31:61:21:86:95:51:
2c:75:e0:82:98:44:38:fe:79:9d:9b:ff:8f:f4:4f:
8f:34:f5:49:ab:f4:57:0d:ae:55:6f:c3:10:9e:b2:
61:38:8f:52:03:df:e5:4a:3c:c0:84:b5:5d:fb:81:
27:aa:3f:48:bd:6f:f3:99:0c:7e:82:dc:62:ba:75:
de:a9:3f:ee:cb:f5:5d:e6:ee:4b:1f:ed:0d:41:39:
ca:06:32:da:aa:17:78:ed:af:e4:22:86:c0:34:27:
cd:32:98:7e:a3:40:90:88:9a:91:2a:e4:17:28:26:
bd:60:2c:76:27:c9:55:d8:ee:58:fc:04:6f:cc:9f:
f2:40:01:e9:68:1b:f2:ee:fa:0b:cb:5b:ef:8d:c2:
e9:50:f6:82:02:70:84:ee:d1:9f:6b:72:fe:2d:e8:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.32.0/19
IPv6:
2a0c:b300::/29
Signature Algorithm: sha256WithRSAEncryption
90:ab:99:45:f7:28:9e:51:97:f2:bf:27:fa:43:4b:88:54:32:
99:cb:b0:19:10:2f:9e:c8:64:e8:31:66:67:31:2f:75:56:6c:
81:75:d8:9e:22:a5:aa:41:15:29:b5:7f:1c:06:89:f0:f6:98:
39:79:b1:93:30:73:70:cc:e5:bd:d6:9a:55:83:7c:e2:23:77:
10:49:1e:df:f1:0b:09:49:eb:cf:58:20:f3:b5:f4:cc:a9:a2:
8f:05:70:80:0b:04:39:3d:5f:aa:a3:5b:e2:2b:28:5f:d0:5e:
7e:63:30:26:4e:52:96:5f:00:b2:95:9b:d0:33:77:29:49:e1:
98:b5:ee:d6:5d:c8:68:55:e1:fb:79:4b:2a:3e:3a:40:b3:a1:
94:dc:c8:c7:3d:c4:9f:f4:4b:db:b2:12:42:cf:b6:a4:c7:bb:
ef:3c:f5:cc:2f:67:8e:74:c0:40:9a:f5:67:b1:7b:39:ae:31:
79:c9:4b:53:93:68:38:c9:ca:44:57:e6:cc:a7:6e:4b:34:04:
8c:47:b7:5b:9f:0b:9e:ee:53:f1:4c:bf:05:10:09:91:7f:88:
42:3a:4a:01:63:65:e2:86:be:4d:e3:86:c3:1b:ac:9c:53:48:
ed:1d:2c:6b:8d:46:53:37:f9:90:3f:ed:2c:36:d7:50:0d:f3:
c6:ba:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:11 2025 by rpki-client