Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer (raw, json)
Hash identifier: t1y2u6RlexgmlfKLqMMLMk7ynAX6nA17ZnQZQUejkiI=
Subject key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FDE66963F7D8BA04E754AA93C911D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a09:6900::/29
IP: 2a09:8b80::/29
IP: 2a0a:bbc0::/29
IP: 2a0d:b9c0::/29
IP: 2a0d:f640::/29
IP: 2a0e:6740::/29
IP: 2a0e:8840::/29
IP: 2a0e:9180::/29
IP: 2a0e:c440::/29
IP: 2a0f:c00::/29
IP: 2a0f:4300::/29
IP: 2a0f:72c0::/29
IP: 2a0f:da80::/29
IP: 2a11:1840::/29
IP: 2a11:2d80::/29
IP: 2a11:31c0::/29
IP: 2a11:3f00::/29
IP: 2a11:41c0::/29
IP: 2a11:66c0::/29
IP: 2a12:1240::/29
IP: 2a12:1a40::/29
IP: 2a12:2e40::/29
IP: 2a12:3140::/29
IP: 2a12:3cc0::/29
IP: 2a12:cc00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:66:96:3f:7d:8b:a0:4e:75:4a:a9:3c:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:84:1b:8c:4e:4e:00:d6:17:85:21:00:dd:
8c:c0:7c:53:d3:4a:4a:9d:d8:ad:c6:01:1c:e1:10:
a9:69:32:75:79:d0:b6:04:ac:92:17:1d:8e:67:38:
db:32:46:a0:af:20:87:3e:15:56:6b:5f:ec:cc:74:
15:15:be:1d:00:47:7c:09:3b:3d:09:be:68:73:eb:
dc:18:8d:d4:df:62:ee:de:bf:67:98:db:75:36:15:
ae:3d:8e:b3:3c:f1:de:00:c6:7e:e5:94:e3:f6:a1:
e7:37:09:a8:27:b4:c9:bd:b8:df:af:8b:28:57:dc:
22:8c:c5:36:94:fd:40:dc:00:b1:1c:97:56:5d:bf:
73:98:76:f0:51:e2:c9:95:16:51:95:7d:29:0e:02:
c2:3b:12:a5:bc:a8:7f:a2:66:a9:16:dc:e7:26:cf:
75:72:92:b7:93:7b:1e:de:42:f6:a1:09:28:75:01:
50:9b:ef:b3:36:6e:30:57:f4:f9:d1:bf:e9:b5:8d:
00:cc:0d:ea:6a:9a:8e:30:76:d3:69:3b:a1:34:58:
3e:d3:ee:05:21:db:d6:e2:56:cc:4b:7b:e7:9a:ed:
7f:f5:a1:eb:29:d9:f8:17:ad:9f:f7:39:d4:59:fc:
b8:8e:81:24:0f:72:d5:b4:29:e6:13:cb:97:53:ef:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6900::/29
2a09:8b80::/29
2a0a:bbc0::/29
2a0d:b9c0::/29
2a0d:f640::/29
2a0e:6740::/29
2a0e:8840::/29
2a0e:9180::/29
2a0e:c440::/29
2a0f:c00::/29
2a0f:4300::/29
2a0f:72c0::/29
2a0f:da80::/29
2a11:1840::/29
2a11:2d80::/29
2a11:31c0::/29
2a11:3f00::/29
2a11:41c0::/29
2a11:66c0::/29
2a12:1240::/29
2a12:1a40::/29
2a12:2e40::/29
2a12:3140::/29
2a12:3cc0::/29
2a12:cc00::/29
Signature Algorithm: sha256WithRSAEncryption
89:d5:8b:bd:88:2e:09:84:17:1f:0b:54:c2:72:ca:6d:da:8e:
4c:58:42:b3:64:48:29:8f:e9:93:41:48:92:1b:05:7d:23:9b:
dd:de:e0:6e:18:16:8b:e5:95:fb:dc:55:86:b3:c3:9f:da:5d:
d7:aa:9d:7d:8d:9c:b8:e4:a7:85:7b:6c:51:9d:0e:f0:18:26:
b4:bc:ba:cb:2a:21:7b:3a:41:22:4a:c8:ba:cc:17:26:54:fc:
b0:c8:d2:27:2d:55:c1:37:56:06:06:a3:d0:b3:86:b8:2e:94:
bb:2e:cb:15:11:a1:a9:9e:ea:93:21:02:00:64:73:18:10:f7:
7e:b3:a0:e9:2a:86:40:a1:9d:f4:2f:57:4d:6f:85:76:e3:84:
c6:c9:1e:ea:f1:17:7f:c9:68:03:e7:e4:76:91:4f:1a:18:e3:
e9:5b:ce:94:d2:27:9b:86:8a:67:fe:88:30:cb:6a:57:70:55:
18:64:88:a0:ff:55:dc:f8:da:1d:b8:49:43:0b:6f:28:86:66:
13:59:1b:66:38:0f:16:91:b5:79:fb:a4:92:8a:4d:b0:1a:1d:
dc:ac:71:41:8d:35:47:69:36:57:b7:d4:9b:67:a9:05:b0:4a:
5b:d6:22:d9:e8:e0:f2:2f:98:49:2d:8c:0c:35:c4:30:02:c4:
87:a5:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:00:52 2025 by rpki-client