
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
File: JcX73HIgV6ZfqduxF_xL33LtwKc.cer (raw, json)
Hash identifier: g9qfH9gel6XR0CYJ6d9PAqP9bmL1BkT3FyAj74N5irM=
Subject key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA1BD9B24717805317776150E2BEDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.212.92.0/24
IP: 193.37.132.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1b:d9:b2:47:17:80:53:17:77:61:50:e2:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:f1:ab:d3:95:8c:05:00:cc:40:64:40:6f:
bd:f9:fb:58:3a:40:ad:e6:e6:60:27:28:d5:7a:91:
8a:02:24:15:fb:1e:6b:b2:fa:ab:26:4a:32:9b:01:
e0:f2:5a:db:38:de:e4:2a:07:23:d0:f4:e5:98:f3:
50:f9:d6:f6:c4:a6:9b:81:a3:a9:e2:aa:d4:63:a4:
ed:63:42:82:f9:a1:1b:eb:62:61:f2:9d:ca:ba:cf:
bc:66:8d:ba:88:0e:f6:6b:b7:eb:9c:a9:27:02:d8:
87:37:14:3a:c2:fa:87:e1:62:ad:46:48:03:87:57:
7c:2c:b9:d9:d9:35:31:2c:d8:1b:15:18:70:7d:cd:
9e:bb:20:40:8d:a7:19:30:05:ec:21:3b:f6:d2:96:
c2:0c:f7:d1:a9:01:46:ab:3e:20:b5:f4:6b:3c:42:
a0:6d:6c:ae:03:17:95:fa:0f:7c:7e:90:a2:d7:19:
78:81:09:22:2c:0d:ca:b3:f2:08:2b:33:54:5c:7c:
f0:ff:76:2d:5b:64:e4:ad:ac:37:b6:5d:41:0d:bb:
d6:00:a7:63:61:b0:b0:b8:c1:51:94:21:b6:69:f1:
7c:49:1f:b2:e1:8c:02:94:db:af:17:8a:72:8c:bd:
44:74:2b:dc:88:f7:b9:d8:10:f4:6e:97:78:55:f4:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.92.0/24
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:ee:95:cd:a4:9a:4e:e1:b7:3d:fc:67:f1:89:41:49:b6:
97:ee:6f:ad:37:ce:69:e6:80:6d:da:1c:51:6f:21:df:6e:8a:
01:9d:eb:a1:d3:18:30:0b:63:c7:77:9c:68:3c:ff:aa:14:80:
13:9d:cb:78:c8:0a:73:59:24:ce:81:92:8b:d9:64:8f:0f:27:
13:55:04:38:54:75:0d:ef:56:d1:37:4b:5e:43:8a:76:6c:26:
15:37:53:0e:94:0b:cc:b1:4d:e9:fc:c1:f0:8d:6e:64:42:4c:
e8:1f:1d:71:9a:01:0b:23:02:34:ce:ce:61:27:d3:d6:35:98:
fb:ec:66:13:2a:c5:aa:91:66:ec:ac:91:c2:d8:1d:2d:7f:0e:
1a:dc:58:c9:5d:73:7b:6a:41:00:e5:16:77:e5:d8:8b:c8:d4:
69:5b:83:4a:36:43:db:98:02:1d:39:09:e8:0d:1d:59:89:8f:
2b:bf:39:70:6f:e3:49:49:be:92:82:e6:65:95:e6:c6:6a:10:
39:16:41:6d:71:46:a5:48:16:47:1c:1d:ef:65:99:95:25:32:
ae:95:7c:42:b6:8b:d2:5d:e5:c7:26:2e:f5:d7:46:56:3d:59:
4f:c0:d1:46:d4:6c:34:89:81:69:d3:47:47:03:22:a5:c3:22:
42:23:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:35 2025 by rpki-client