Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
File: UrEszH6hBoww14yVXFa5djvPO00.cer (raw, json)
Hash identifier: SSTGzhWRLPQ+Q6u5/2GjLDnKhzwJVnsZ7OeWwfBCWPg=
Subject key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488AFC06D416E2BB0290A074912DC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 93.95.26.0/24
IP: 2a12:f6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8a:fc:06:d4:16:e2:bb:02:90:a0:74:91:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:e0:a0:a1:f2:6a:1d:d8:59:a6:42:e1:e2:
6c:4e:52:ba:cc:dd:b7:d2:3c:a8:2b:9c:6e:69:bb:
0c:2a:9c:a2:33:85:0d:54:39:18:70:93:f4:56:45:
ca:41:da:93:d0:2b:2e:e0:16:b5:82:dc:54:d1:fc:
68:5b:fc:51:3b:6b:d3:f6:c4:f8:e1:a8:c3:23:27:
6e:35:6b:49:c8:68:4c:08:92:63:a0:a9:64:df:7b:
8f:67:3d:a0:af:84:a2:01:d5:ba:ba:35:8e:93:91:
3f:a6:3e:cc:4e:71:c2:16:0a:cd:b2:47:43:c0:a3:
fe:d1:16:e3:12:83:c6:08:d4:f5:87:c9:9a:6e:b4:
83:5d:5b:81:2b:0a:a9:bd:51:61:03:9b:c1:4b:f2:
e0:57:bc:bf:e9:ea:7b:2e:30:56:4d:f1:a3:b7:1b:
09:03:96:9d:5e:2a:4b:c1:dc:87:5c:52:76:e2:26:
e5:dc:33:23:bb:a3:af:26:3b:99:bc:48:67:e0:cf:
bf:a8:a6:ad:6b:10:d6:85:95:52:20:13:31:85:d6:
df:bc:34:2e:5c:ef:0f:b2:c7:ea:f9:c1:1d:18:14:
bb:40:fc:d2:ef:30:ee:15:8b:f8:f2:f4:40:f5:24:
3b:92:08:29:0f:42:5f:6a:01:85:ce:ec:78:9d:5a:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.26.0/24
IPv6:
2a12:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:f8:41:fc:c4:74:73:73:8d:6f:c3:d6:01:69:10:a1:f5:c3:
de:ad:de:ab:b5:20:6f:5f:1c:27:80:6e:55:e8:46:31:7d:54:
c3:08:04:07:0e:4f:3b:e1:a7:6e:b5:36:d8:e5:ce:c0:17:b5:
83:35:ed:ea:5e:81:00:8c:2e:7e:e5:a3:d0:b4:9c:d9:42:bb:
9a:9a:be:2f:05:54:93:dc:6e:78:8b:e3:3a:b0:dd:b9:2f:83:
09:ff:bc:f6:e5:d4:08:e7:46:f5:d9:57:0a:be:67:2e:4a:37:
3f:dd:29:e1:c6:96:30:7b:ac:1c:1b:0d:ae:6a:f5:75:96:fd:
8c:4a:8d:cf:04:c0:44:42:7b:a8:94:cb:02:c6:5d:a4:2b:22:
69:db:c4:d0:63:26:9b:e9:5f:c3:1a:69:02:31:9a:ff:46:1a:
44:80:ba:e8:0b:f5:de:40:ac:77:7a:25:13:d6:10:d5:8e:d8:
17:04:52:ec:c7:5b:37:53:96:5d:20:5c:52:4c:26:1c:54:63:
c7:69:5b:7f:87:96:2a:3d:d5:0f:22:75:a0:83:55:d6:0e:6b:
e1:31:0d:75:57:e4:f4:c4:80:e1:0d:74:d3:3f:8b:5a:73:e9:
ba:d5:a4:50:9a:a7:38:4e:4b:58:8d:f4:72:d0:5d:fd:fa:80:
3e:72:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:10 2025 by rpki-client