Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clrfKXu7QgxQo5pt9LNE8mCrQQk.cer
File: clrfKXu7QgxQo5pt9LNE8mCrQQk.cer (raw, json)
Hash identifier: eTEdX5y2TV0Y93QG2eNp9ecQRH3fsGv7aP9fLSg+oNg=
Subject key identifier: 72:5A:DF:29:7B:BB:42:0C:50:A3:9A:6D:F4:B3:44:F2:60:AB:41:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D896B75FB3A0F206B8CE88CD3117432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.9.26.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:6b:75:fb:3a:0f:20:6b:8c:e8:8c:d3:11:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=725adf297bbb420c50a39a6df4b344f260ab4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:a5:31:40:7f:ca:60:d7:71:92:af:65:67:
3d:b1:2f:b2:cf:58:fc:9d:88:e6:ac:de:58:2f:44:
ce:5f:1c:cc:ce:c2:80:e5:4c:13:01:1f:c9:eb:f4:
8f:6a:b4:60:ce:51:61:08:6a:04:83:b4:48:4f:63:
06:39:b7:dc:f0:3d:36:7c:8e:b5:91:44:3e:2c:af:
e9:1d:d1:a5:f9:3f:77:83:10:42:66:e5:ae:ae:64:
e5:2e:d4:2d:59:73:0f:c5:2f:5f:9f:4c:9c:68:71:
12:8a:26:3f:56:82:32:e9:9d:b1:84:63:b9:d5:6e:
23:8a:22:34:66:73:24:73:b1:53:89:3c:f2:15:c5:
58:45:f8:3e:be:92:94:33:90:a2:42:b9:ec:0b:5f:
ad:2c:45:87:60:47:63:39:f5:fd:17:70:fb:6b:e1:
6f:c9:39:54:d7:48:cd:ef:7c:dc:fe:ca:4b:60:3e:
70:da:43:98:39:9a:50:43:ea:f6:b8:6c:05:a5:b0:
be:08:cf:78:04:8a:ef:68:3a:5f:fe:4e:aa:86:95:
db:6c:eb:bd:d1:61:3e:9b:cb:d0:f9:8e:48:ec:bd:
a7:70:a7:21:20:5b:e8:a6:e5:5c:54:cb:52:52:79:
b2:b2:25:87:bb:36:05:63:41:70:97:88:5f:7d:43:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5A:DF:29:7B:BB:42:0C:50:A3:9A:6D:F4:B3:44:F2:60:AB:41:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.26.0/23
Signature Algorithm: sha256WithRSAEncryption
87:c8:b1:df:c3:33:d1:6c:07:0d:50:6d:04:4e:98:65:ae:88:
ed:b2:79:0c:1b:9d:14:6b:01:5f:23:15:04:08:16:c2:ad:4a:
35:eb:74:b1:dd:d6:0e:cd:cb:c6:49:3b:dd:92:87:1c:40:e2:
48:c0:22:a6:55:fc:ee:64:23:f8:d0:1e:39:ce:39:ec:ab:38:
2f:ac:2c:a7:50:a2:78:89:90:66:21:b9:dc:2b:2f:93:c4:dd:
5f:d3:44:4a:ab:12:70:3b:8c:c7:6b:79:79:24:e4:51:10:8b:
98:90:cb:51:19:1c:71:9a:85:14:6a:02:15:66:1d:bd:94:14:
1b:d3:e0:b4:1f:f6:12:86:1d:25:64:d4:e0:fa:6d:7a:10:ae:
30:19:b5:35:76:74:c6:fd:19:f1:40:16:c5:2f:bf:3b:32:cd:
66:48:b4:71:18:43:2b:2e:ea:6f:24:bf:8b:bb:30:5e:81:e3:
eb:dc:64:d3:10:52:77:5c:5c:1c:b9:ab:98:bf:db:2e:ac:66:
2b:fe:68:48:30:3a:6d:07:1d:13:26:b7:0f:2d:6c:ea:e9:e3:
fc:56:f4:af:21:d5:7b:17:9a:36:86:9b:f0:66:df:84:95:72:
62:a9:be:33:b1:fc:e4:a4:29:e8:35:2a:ff:e0:36:a1:5d:36:
2f:80:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:59 2025 by rpki-client