Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
File: Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer (raw, json)
Hash identifier: Ahbc8EmOawf7BIQK8DbUFQ3kzef9EaCWSzEGUkSUn94=
Subject key identifier: 0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49377FE34E8D80D912785EAF5000DBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 78.108.212.0/22
IP: 2a0d:11c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:fe:34:e8:d8:0d:91:27:85:ea:f5:00:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eecb618add708467f774d93e2674076993ecd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:3e:ff:63:de:50:b2:0e:0e:d1:f4:6d:90:
b7:8e:c3:23:9d:89:2a:7e:d4:d4:66:6b:ed:7c:6d:
3e:8f:55:64:13:cd:a3:23:d6:32:55:5b:89:cf:ae:
18:13:35:a1:25:05:09:5e:f0:24:3f:c3:c5:92:7e:
6f:82:d9:23:84:e9:a7:3c:d3:84:c1:c5:05:de:68:
0a:4e:b5:aa:27:95:e0:1c:ce:9b:01:e8:9b:07:85:
25:c4:95:94:f4:ee:5d:3b:91:bb:66:41:c2:8f:96:
5e:ea:0f:23:79:a4:a7:0a:b3:74:9e:ee:56:c3:8c:
4a:97:80:84:cf:8b:38:98:65:29:49:49:2c:f8:a3:
7c:5f:23:b8:01:ff:1c:4b:68:6e:7e:61:38:6e:6f:
a7:7c:2b:56:5b:e1:01:c2:4b:cc:5e:4a:00:be:e2:
bb:46:6f:33:c7:99:9a:00:b3:c2:75:23:a5:0e:fd:
27:97:ce:e0:67:81:d8:38:74:88:c1:5d:fa:fb:f0:
f9:1b:fc:27:d7:96:18:e7:33:1d:c3:47:d0:43:dc:
71:80:09:b3:0d:65:bf:59:28:e4:32:e5:04:f4:b7:
40:34:f5:a0:ca:4b:09:d1:44:ef:fc:39:52:15:44:
4c:49:b1:c7:dc:d9:d4:0e:46:12:aa:f2:75:28:84:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.212.0/22
IPv6:
2a0d:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:39:88:d2:9a:49:3e:cd:a8:0e:ef:49:af:88:9c:d8:31:ea:
74:3d:ec:45:8e:b6:d9:dc:78:a2:43:82:e7:b3:75:1d:91:92:
67:44:5f:a9:ed:9e:34:26:c3:4d:e4:f9:b6:e6:9c:4a:e8:9b:
a0:63:6d:a3:0a:5e:fb:38:b8:5a:47:d0:03:ef:1d:d2:ed:23:
a9:7a:ea:d3:ad:d5:54:8d:e2:6f:4b:d8:0b:d1:04:5a:8e:b1:
a8:6f:0d:eb:dc:b8:a4:31:c3:c1:86:2d:e5:4f:98:d7:bb:a8:
8c:5a:80:75:4e:34:d6:7e:eb:ff:72:3a:e4:2f:c6:de:6f:e5:
95:2a:13:97:53:2d:5e:ef:7a:72:77:0b:f0:cf:3d:53:8c:71:
43:ba:d0:4c:e8:d9:e4:c2:11:ab:d6:06:45:df:73:be:e0:ec:
8c:b5:eb:0c:25:5a:89:54:1e:bc:14:8f:32:35:24:be:8e:ff:
c4:6c:4c:72:c0:67:e8:0a:64:9d:b8:52:76:95:91:34:9a:bc:
50:d5:6a:ea:2e:a2:c4:1d:82:44:da:7a:e3:02:b6:a6:48:6b:
0e:c0:63:cf:2d:c1:08:bf:1f:c6:b2:a5:c1:a8:3b:07:6b:fb:
45:22:56:42:ce:1e:b6:0a:e9:de:bf:d0:39:2c:05:9b:6f:b2:
1a:81:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:49 2025 by rpki-client