Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
File: SEhV5wGTloY1rESSrXAqgkjgM-g.cer (raw, json)
Hash identifier: U2FIiadSlMVumNaahGb6P55uGK770RO8mvpKCNh0fmY=
Subject key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747B8E0A90F0E125055CFF4E1B7EF9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44527
IP: 93.92.104.0/21
IP: 185.62.220.0/22
IP: 2a04:8040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b8:e0:a9:0f:0e:12:50:55:cf:f4:e1:b7:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484855e70193968635ac4492ad702a8248e033e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:cd:48:dc:84:eb:9f:1f:db:30:f2:db:10:
1d:e5:4a:d2:6c:26:fd:dd:af:ac:91:23:2d:a8:72:
5a:e7:f8:7a:aa:28:53:28:1b:86:8f:f1:71:31:43:
cd:ff:f5:bc:fc:82:f5:15:d5:5f:92:6c:3f:d7:8a:
94:76:8c:1d:7d:f7:af:7e:a6:b1:83:be:f0:d1:d7:
92:7a:42:b7:b7:8c:41:e9:da:0b:0a:a1:6f:b1:4c:
19:90:f7:52:b1:81:5b:c3:9e:89:f8:85:ba:b9:b0:
18:12:9f:45:d3:fc:15:07:87:6c:eb:6e:d7:3b:17:
3b:db:c7:d8:aa:71:a3:0c:de:6c:c0:45:16:b0:0d:
48:27:5d:c8:10:23:84:fe:aa:47:cb:4c:fc:05:64:
78:ae:d5:aa:85:81:46:18:42:58:9e:3a:75:7c:a4:
f8:ed:aa:84:7d:d7:94:e8:60:18:55:e0:76:32:a4:
37:3f:19:dd:fd:25:3b:4d:91:ad:2a:59:e6:f7:ef:
15:c3:45:7d:21:f3:1c:6f:d5:de:eb:e4:3c:82:05:
f7:b3:f8:24:20:05:ff:9f:74:8d:f1:3a:c2:cc:3b:
86:ad:51:68:08:7d:68:b6:ab:77:c4:77:cb:8e:94:
18:b3:eb:b2:f0:b7:5a:b9:f9:5d:32:ce:f2:f7:39:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.104.0/21
185.62.220.0/22
IPv6:
2a04:8040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44527
Signature Algorithm: sha256WithRSAEncryption
10:ce:cb:04:4c:68:a5:40:6d:46:e6:65:be:2e:3f:61:59:8e:
12:0d:81:a3:f8:c1:39:ec:e9:b0:01:81:fd:5c:13:4c:53:59:
35:5e:30:b9:52:b4:63:98:7d:91:99:b8:b4:07:51:57:e2:ac:
d2:e2:9e:4d:23:4c:31:24:3d:ab:7b:94:ca:ff:23:f2:1e:2a:
71:2a:cc:03:d5:a7:80:0a:e5:12:a7:fa:7f:79:ed:b1:ac:6f:
bb:96:96:2d:ae:d4:8f:2f:4a:5d:b2:63:dc:2b:75:a1:49:8c:
8d:9e:7f:f2:f0:05:bf:a1:10:7b:83:e6:c3:a8:98:86:9d:fc:
4b:8e:ac:f6:d6:5c:6c:e5:d5:13:da:f2:9d:92:0b:31:3e:c0:
ab:81:bd:c4:a9:20:0c:b9:53:4d:c2:37:8a:3a:7d:02:30:ea:
a6:d7:2c:8e:b0:05:85:5b:15:e9:ee:4e:fc:fe:e6:70:50:ae:
32:82:2d:78:60:78:71:c3:18:b2:d3:7b:6d:c4:aa:17:14:4c:
39:03:9b:cd:88:7e:67:cb:c3:6b:f8:64:57:21:da:c7:99:1b:
d3:bd:19:4d:92:cd:cd:dc:72:cb:0f:bd:b9:b3:cb:52:3e:d2:
9e:dc:ef:43:72:ff:7d:23:8a:54:6f:ac:e6:4f:df:04:11:b0:
23:97:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:45:18 2025 by rpki-client