Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer
File: IlgsR7AeBtiDaUhB48mAOCxVlAY.cer (raw, json)
Hash identifier: 2vZgwXPBc3eey7Fbsm29M5wLAYelM/ckIKoXC5pfCZ0=
Subject key identifier: 22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B8B28559775EB20735457A20F1301B605
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Nov 2023 13:52:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.52.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:28:55:97:75:eb:20:73:54:57:a2:0f:13:01:b6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 13:52:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22582c47b01e06d883694841e3c980382c559406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:a9:4a:54:09:ce:f2:5e:5f:1c:d5:1b:24:
34:02:dd:ac:1e:d7:0d:4d:c9:e0:48:4c:5d:ea:ff:
69:92:c5:49:53:33:f2:f7:d7:7d:a5:ea:ff:3b:ce:
f3:56:87:df:44:a3:34:1e:a7:c4:48:b6:4f:82:56:
c6:26:02:78:8e:76:5b:d2:cb:98:c6:57:9c:cb:fa:
be:1b:a8:54:b3:16:df:71:48:86:7c:69:b8:92:8f:
f9:83:50:bb:61:6f:5e:e9:44:9c:8b:d2:58:1e:51:
b3:42:cb:c5:01:c4:7a:ed:a9:8e:49:a4:62:a1:7c:
ee:3b:57:dc:44:5e:be:f0:3b:c3:b7:2e:a2:e3:0d:
f3:6a:91:7c:5a:e9:b6:71:07:d9:56:53:98:8e:c3:
c0:99:aa:e3:d9:86:72:d1:60:3c:29:25:f5:f5:8d:
14:04:11:7b:2d:c8:9c:03:3a:59:69:46:0d:56:1d:
9f:5f:64:cb:7a:43:e9:db:83:b7:f0:01:73:04:e3:
9c:b6:95:d0:ba:48:59:d0:ae:fd:0a:64:6b:ec:c5:
98:b1:b8:bb:7d:a2:ee:c5:53:a1:b1:73:aa:7d:e1:
d3:ad:15:5e:02:19:5a:d4:f0:05:b2:66:f5:90:29:
cc:a1:cb:40:9e:c4:67:45:18:c3:f7:e2:57:e1:68:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.20.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b1:7c:0b:49:81:d3:15:d1:d3:9c:8e:30:2c:51:f7:78:b4:
4f:03:d9:06:6f:57:66:77:70:43:23:b6:32:bd:7e:0f:b6:b5:
5c:2b:e2:1e:2c:47:16:a1:21:ca:e5:5e:8b:2e:3a:47:e9:f0:
88:0c:67:97:ec:26:25:c9:23:42:a5:fd:0d:94:01:a3:c3:ea:
a9:26:50:a1:af:28:10:c4:46:fc:6f:f1:a5:c3:c8:3c:50:3d:
6b:ce:78:35:ef:fd:1d:7a:33:c9:b6:71:ba:82:aa:64:c5:16:
48:a2:00:ee:81:5b:bd:1b:1a:99:e4:0c:84:5c:72:98:58:d7:
3e:68:3a:d1:9b:1a:b3:b5:f3:ba:d6:de:02:94:70:b7:c9:b5:
03:ed:fb:81:38:1a:e2:19:79:78:60:e3:be:70:15:d1:12:e6:
6a:e6:29:c4:06:5c:95:e0:17:a6:ad:c8:96:7b:a3:5d:ac:95:
4f:8d:f3:f8:86:7f:f1:1b:f0:ec:c7:3a:d2:fe:d7:43:72:ef:
76:2e:b8:f2:53:7b:f0:44:c7:df:32:ba:bb:6d:1d:bf:1a:a9:
55:1c:2d:b4:77:88:b4:56:2e:fe:3d:4a:f6:4b:db:57:86:70:
ca:8d:9d:5f:d3:09:10:6a:3b:04:06:87:8d:c0:3e:02:2f:c6:
1e:79:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:08 2025 by rpki-client