Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
File: KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer (raw, json)
Hash identifier: Cq9i7y3dw5ltZ7w3cwgxxFo9TBtMOJiGCJ54gSsc6eE=
Subject key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194DFC2D8AAD94002457B19F1AA333F6685
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Feb 2025 09:34:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.139.196.0/22
IP: 45.156.52.0/22
IP: 95.214.172.0/22
IP: 95.214.180.0/22
IP: 185.115.207.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:c2:d8:aa:d9:40:02:45:7b:19:f1:aa:33:3f:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 09:34:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:e8:7c:12:79:47:e1:d0:2e:0d:3d:eb:e0:
c3:66:3b:e9:e5:a2:6d:d5:81:a6:fb:f3:95:2e:39:
ae:8e:fc:1a:b6:23:ac:37:b7:dc:72:50:84:0d:e7:
79:55:7f:77:2d:5d:7b:40:1d:34:b3:78:df:a4:73:
a2:c7:81:72:e5:57:86:fd:7f:35:c9:13:d3:55:4b:
05:b2:74:c6:78:27:ba:c3:09:37:0c:cb:68:17:cc:
c1:df:c0:71:b5:c1:fd:1a:e8:3a:89:32:95:cd:c8:
37:f2:6b:75:b6:5c:5e:cd:52:9e:ed:04:ed:62:17:
74:20:ce:3d:ab:6e:e1:c6:9b:40:36:e2:19:b0:af:
0f:e4:27:27:1c:f1:a3:15:f7:1e:6b:87:be:45:9b:
da:61:2b:b3:80:4c:9d:93:c4:ef:6f:73:37:b0:27:
2f:60:07:2d:00:ff:9a:f9:04:48:00:4c:7c:e7:c4:
e6:c9:8b:a6:b8:a0:22:90:7a:94:1a:b6:19:fe:59:
19:ec:66:4b:8d:b8:09:ac:5b:dd:2e:1b:61:ab:2d:
c7:3c:48:78:3d:ea:91:0f:ec:99:b0:2b:75:8a:c6:
52:cf:94:a4:85:c4:21:30:83:df:93:0c:29:d6:6c:
0e:08:ef:a4:5f:3e:fc:1b:e9:3f:bf:7a:2e:f7:59:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.156.52.0/22
95.214.172.0/22
95.214.180.0/22
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
55:13:d9:76:45:67:d0:11:2f:3e:bb:ea:e6:74:65:6f:ad:99:
92:98:bf:e6:0d:00:98:f1:d8:90:89:a3:0b:99:da:8a:1e:a6:
6f:4a:69:43:20:ac:82:51:cf:5f:f7:b4:dd:cb:a4:df:ac:b3:
32:95:34:c3:ca:81:0f:0c:b8:07:f3:f1:7d:f1:e0:09:30:0e:
96:0c:ca:84:b2:c3:76:ac:26:b9:de:71:9a:d7:4d:f7:26:2c:
7b:3d:e4:ce:53:45:ee:e8:91:09:f5:21:e1:c5:b5:ec:51:88:
ba:4f:de:b2:57:ae:ab:06:f6:61:8c:3f:79:2d:14:0e:0f:d4:
07:84:95:eb:f0:cd:0c:9e:33:37:2a:1a:6b:57:77:aa:f2:d5:
9d:31:0f:7c:51:48:9b:1e:69:53:94:69:ba:39:35:cb:08:34:
b6:48:36:5e:f7:36:6b:77:8e:b5:ba:8c:42:bb:a4:f8:ff:a6:
f4:8e:6e:15:06:9a:c2:9e:f3:00:7e:63:61:e2:12:7d:05:2f:
5f:47:ff:3a:af:1e:9d:33:57:c9:a0:9a:e4:79:6b:49:5b:f8:
18:d7:41:93:d8:f8:6c:49:ef:3c:cc:c6:b2:cf:99:e1:3f:42:
3e:10:2e:ea:5f:05:4f:84:b1:55:91:bd:f9:e0:a6:ff:89:61:
8e:56:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:41 2025 by rpki-client