Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
File: V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer (raw, json)
Hash identifier: wOYn/oHq/Ult2xgiHoAIoYOzjW5hP4UvrIHcq/kQUyE=
Subject key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EE10577C4A13E7A8995096035D363
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:17e4::/48
IP: 2001:67c:17e8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e1:05:77:c4:a1:3e:7a:89:95:09:60:35:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:de:4e:46:4a:ed:db:db:04:14:b1:30:c6:
06:9f:24:39:06:80:90:26:08:ce:60:de:a9:55:af:
01:77:d6:ac:5f:3a:2b:1a:14:20:74:82:10:6f:7c:
f6:43:e6:b4:7f:77:64:19:08:51:cb:f4:70:03:16:
a9:0c:40:9e:7d:d5:95:ee:e1:e3:05:9f:bf:c4:08:
ff:34:19:d7:dc:a2:d2:b1:27:ef:4c:3c:22:a1:07:
92:08:72:cf:92:88:0b:29:08:82:7b:c9:a0:b5:ee:
4d:97:e4:0a:48:08:59:c4:8a:64:e3:bc:33:73:34:
df:43:1c:94:6c:e1:ab:2b:45:ba:6f:41:fe:2a:18:
34:99:ee:e1:9b:9a:4e:19:42:42:e1:6d:d6:fd:cd:
67:ef:a4:57:3c:7f:96:95:06:b3:a3:5c:18:8d:27:
f4:8c:5a:ae:a1:fc:d5:6d:ad:8d:a6:ff:d4:f9:ad:
74:ab:73:ad:b0:ad:39:c7:75:df:7e:0f:4d:0b:33:
9d:db:45:f9:0b:1b:08:e3:3f:22:29:e4:4e:5e:a7:
26:6b:39:56:b5:26:3a:a6:69:ba:4d:65:4c:d3:32:
a0:c2:17:2c:45:80:73:0d:6f:dc:4b:32:4a:dd:a3:
87:1f:69:f7:a9:d4:bc:3c:fd:d3:fe:58:dc:30:41:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17e4::/48
2001:67c:17e8::/48
Signature Algorithm: sha256WithRSAEncryption
5c:5d:51:d7:34:dd:0d:d2:2d:ef:c3:24:11:ff:08:f0:f1:38:
d7:2b:4a:aa:c4:45:dc:0f:66:22:af:28:54:a8:2d:9e:2e:7b:
d6:a4:43:0d:ef:5c:32:bd:3c:bd:04:89:4e:b7:3f:0f:b7:bc:
b1:d4:51:85:cb:cc:4b:e9:14:43:e4:95:d8:7f:9b:e3:78:1b:
47:01:f0:53:de:30:be:67:ab:79:b4:04:8f:54:50:1b:f9:a4:
10:a3:63:80:5a:1a:07:03:54:ae:d5:fd:67:84:74:69:ad:dd:
52:28:bb:53:4c:27:d8:25:8e:14:6d:60:42:24:ac:c7:db:82:
2b:ca:cc:b6:ad:63:d3:1e:ed:04:a2:3b:f3:29:14:b9:b2:66:
eb:a1:bb:a5:2c:d5:aa:9d:cf:8b:9b:bd:59:05:f8:6d:51:5d:
f6:95:4f:96:1b:b6:5a:9b:67:86:3c:26:67:9a:e6:b6:89:4d:
a8:b9:f3:e7:1f:4a:9f:50:80:16:da:55:8d:7f:71:2d:96:dd:
38:b3:d9:83:74:de:83:2e:07:82:d0:c6:bf:8a:dc:00:eb:09:
33:61:98:72:e0:73:df:03:30:b8:fd:d8:45:82:cf:eb:08:bf:
2c:4f:bf:81:94:c6:4f:81:c0:6d:a2:39:b3:e7:dc:6b:1d:22:
77:83:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:44:11 2025 by rpki-client