Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.cer
File: PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.cer (raw, json)
Hash identifier: SkuNIH8b+ILG+E91XaFIyt5H6qqcqMW3JGiIabHmQl4=
Subject key identifier: 3C:70:F0:33:1F:1B:36:39:97:67:8B:43:05:B5:F5:B9:C0:5D:84:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FABCAE04447F53BC43C65C1F6B8F5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 9031
AS: 203640
IP: 77.109.64.0/18
IP: 79.132.224.0/19
IP: 85.234.192.0/19
IP: 109.236.128.0/20
IP: 185.29.108.0/22
IP: 185.95.72.0/22
IP: 212.71.0.0/19
IP: 212.233.32.0/19
IP: 213.211.128.0/18
IP: 213.219.128.0/18
IP: 2a02:578::/32
IP: 2a04:4400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:bc:ae:04:44:7f:53:bc:43:c6:5c:1f:6b:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c70f0331f1b363997678b4305b5f5b9c05d8444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:67:28:b7:67:9e:0c:28:b4:c4:47:ab:f3:
6b:dd:2f:d8:a2:90:f2:23:46:bf:19:4b:ec:66:de:
5c:89:55:5d:70:84:81:c5:e3:5c:90:ec:e4:f7:c8:
b5:11:2c:e6:d3:b1:66:a1:f9:ec:cb:dc:ff:b9:86:
6b:13:4b:e8:6c:23:82:75:3c:9d:0a:df:0f:b0:18:
06:53:fa:e7:9a:92:a6:29:32:3f:77:3d:ca:5a:c8:
97:00:74:40:8b:6a:2d:ac:6b:d1:45:d8:52:fa:b5:
a1:b9:a3:7a:40:5c:c0:0c:51:bb:66:6f:95:29:3a:
19:d7:19:52:56:ec:29:cc:25:c3:08:b6:bf:c6:0f:
a5:e8:fc:32:07:c4:f7:45:03:fe:8a:58:36:68:0a:
77:6f:81:be:52:97:12:5f:94:44:2a:73:ac:b5:5f:
86:54:f3:4c:de:6c:cc:e0:46:b1:dd:93:7c:2a:16:
c2:9c:60:c3:cf:9f:e1:e9:37:24:4b:67:82:d7:47:
82:c1:a2:34:93:3a:07:af:83:2a:8c:f7:45:67:e1:
e8:28:59:8f:2a:66:df:ef:e3:b1:c4:40:e9:90:af:
65:1b:f3:e2:63:12:d7:5b:79:03:24:65:c6:02:e9:
dc:e0:33:46:18:b3:0b:54:50:30:4d:50:ff:96:e7:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:F0:33:1F:1B:36:39:97:67:8B:43:05:B5:F5:B9:C0:5D:84:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.109.64.0/18
79.132.224.0/19
85.234.192.0/19
109.236.128.0/20
185.29.108.0/22
185.95.72.0/22
212.71.0.0/19
212.233.32.0/19
213.211.128.0/18
213.219.128.0/18
IPv6:
2a02:578::/32
2a04:4400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9031
203640
Signature Algorithm: sha256WithRSAEncryption
7c:12:47:62:f7:d9:9b:71:f6:72:1d:ea:4e:b9:5e:5a:c6:be:
d4:f8:e1:85:12:17:d0:3b:e2:f9:b3:62:7d:dc:67:a3:12:b8:
05:53:d8:5d:d7:fb:9f:96:80:20:25:d5:14:f5:7c:21:fc:8b:
d9:c8:25:54:56:77:70:cc:ee:fd:43:7a:c1:96:88:80:be:e9:
fb:07:94:99:8e:40:b9:c4:87:2d:ec:21:3f:cf:df:b0:df:7f:
9e:de:3b:05:54:e7:88:a9:db:f6:5b:ac:b9:e5:a4:da:d1:6f:
31:c4:b7:e8:9c:4f:50:c5:68:1f:d9:59:87:59:ab:5e:fb:78:
c4:dd:6a:14:b6:0c:fd:fe:fe:14:e1:43:65:1e:5d:9e:d1:d6:
ca:13:00:84:0a:80:d7:95:23:a8:f4:71:bc:63:d4:96:ad:b0:
05:51:7c:d2:b0:58:63:b5:82:bd:8a:b6:ce:b3:c4:4b:d6:d7:
64:2f:61:37:80:d3:0b:71:df:7c:b9:0f:49:73:8f:6a:54:4f:
0d:24:cb:87:8f:72:b8:4b:d6:61:ce:65:b5:9a:25:bc:5d:55:
99:bd:c7:97:6d:31:d5:2a:04:7c:c9:23:9d:e5:f5:07:9d:d8:
ed:4b:b4:e3:a2:05:61:cf:a5:93:cc:ca:b8:bc:e1:66:63:a4:
64:aa:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:46 2025 by rpki-client