Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
File: XstMrbut1QD0nKaX1Waidh4Bdgg.cer (raw, json)
Hash identifier: HRLDCMuFl4rPOWUK5LTLZDhtmxkjOk6wC7nKBk+EvGw=
Subject key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01958F5EA1B7732C0BCA702ABAEBC8921FDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 13 Mar 2025 11:58:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.75.221.0/24
IP: 86.54.172.0/24
IP: 141.193.228.0/24
IP: 170.62.190.0/24
IP: 213.254.170.0/24
IP: 2a03:e080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:5e:a1:b7:73:2c:0b:ca:70:2a:ba:eb:c8:92:1f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 11:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:73:4a:c0:4d:cc:95:cb:b3:28:51:49:5d:
64:17:27:6d:18:08:ed:b9:f9:68:75:54:06:2b:09:
17:bc:72:73:0a:a1:b8:74:af:ed:d2:66:91:9f:ca:
48:71:b0:53:a8:c4:eb:e5:79:e4:15:c5:b9:f1:4a:
8b:7d:a8:38:8e:55:66:b4:b3:e5:dd:8c:b6:fe:6e:
79:01:4a:b8:f9:f3:85:36:74:94:c8:72:c0:eb:11:
fa:0d:cd:5b:48:70:1b:fb:cf:dc:f8:2a:93:52:43:
dd:76:53:38:38:68:6d:3c:5f:59:4c:64:85:d6:be:
48:47:55:a6:7a:2c:37:e7:38:22:ae:56:e5:ba:90:
07:a6:76:69:6c:f1:1a:83:1f:88:ea:c6:3b:a3:d6:
55:80:ac:2b:71:e8:8c:fc:a6:56:3b:f0:12:69:57:
b5:27:64:c4:28:7b:28:e8:12:64:40:c0:14:41:7d:
00:99:ca:a1:86:23:71:ac:b1:5e:12:b6:60:04:09:
ed:10:2b:a6:8c:2b:52:91:c2:9f:a6:09:33:e3:0f:
bd:cb:e4:a8:cd:aa:65:d3:c8:f6:c0:7d:25:76:15:
b0:5c:1a:8c:89:a4:1b:54:c4:cd:e1:55:eb:4f:3b:
df:36:ff:25:9d:77:78:e7:dd:1b:e2:b6:fb:c4:b1:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
86.54.172.0/24
141.193.228.0/24
170.62.190.0/24
213.254.170.0/24
IPv6:
2a03:e080::/29
Signature Algorithm: sha256WithRSAEncryption
09:5f:17:cf:36:2e:63:b0:2b:5a:a8:f7:aa:e4:bd:da:d3:49:
6e:50:ad:65:20:b3:f2:97:e7:fe:c1:73:34:f1:37:7f:77:56:
8b:47:38:7b:ff:6c:b4:84:2f:e4:4e:ca:88:f1:1e:c8:dd:1b:
9d:81:c8:54:36:94:b3:12:1f:cf:90:31:54:ba:da:fe:94:c1:
ce:75:4f:a7:04:8a:38:bb:2c:5c:02:68:96:f3:97:69:3c:ab:
b9:94:6f:75:2a:e7:a2:0c:00:b7:a6:30:d0:2b:ed:37:bf:07:
8e:df:a3:f5:cd:96:ea:63:fb:93:42:e2:ae:e1:8a:de:61:0d:
d2:8c:5e:96:25:17:ca:a6:f4:3f:b3:3a:b4:4a:e2:b8:00:08:
bc:27:6b:65:47:cd:af:c7:a3:33:d3:5d:aa:fe:e1:3b:2d:0e:
6a:0e:f7:94:92:8b:b2:44:8c:8a:e6:07:2d:b2:43:a4:9c:9b:
eb:43:27:87:45:e3:64:65:bc:76:79:57:8b:21:23:24:50:85:
c7:75:a5:17:31:68:f9:10:bf:81:06:fc:b0:8c:44:8e:e7:f9:
8a:d8:7f:5b:6f:0c:c0:6f:4e:2d:ef:24:c9:03:51:f0:ce:5b:
24:60:3b:bc:a4:38:fe:ba:78:49:22:0f:cf:6e:5e:5a:76:2a:
06:02:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:58:37 2025 by rpki-client