Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
File: dybr_w8tdL-iFgD_c_4maR_HMak.cer (raw, json)
Hash identifier: rU08d3wIFB9SHMMAoBlx4Nh5y1JE8J0IPcRWLlMefks=
Subject key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247BDC1D2B794BF548A3DEB6E67922
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.211.150.0/24
IP: 2a0c:b140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7b:dc:1d:2b:79:4b:f5:48:a3:de:b6:e6:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:a6:6a:d9:f6:29:a6:74:5d:a7:e2:5a:e1:
24:9d:55:24:63:09:52:54:f8:58:50:07:f9:bc:8a:
7d:d7:17:83:d5:f0:ed:8c:18:c1:05:1f:5b:c2:50:
80:8a:98:22:ee:0d:b2:f9:07:03:ad:c4:69:eb:fb:
b0:c7:80:c8:13:8e:6f:1f:04:b2:29:8f:9e:a4:81:
14:c9:58:2b:fc:80:10:2c:a1:07:53:55:3b:c3:95:
f8:cb:9b:68:cd:d4:e7:da:be:d6:a2:d0:dc:3b:d4:
7d:3d:98:93:5a:59:36:f5:0c:be:70:14:41:76:75:
08:37:07:99:7b:e1:1d:eb:65:d8:4b:34:1b:21:db:
5b:21:d1:96:c5:39:8a:78:3b:3f:34:9a:02:45:36:
d0:a9:fa:c6:73:5e:ab:51:e3:ab:26:f5:34:d2:ce:
47:52:a4:9f:5a:a0:54:a0:c0:37:c6:c2:c1:f5:2d:
28:9f:b5:52:52:64:08:0f:dc:f5:d2:1b:78:71:15:
51:05:3e:e9:2a:27:6c:95:8d:c3:20:14:6b:56:0c:
34:58:cf:ed:d7:ff:9a:30:2b:07:4a:06:18:12:7e:
26:a5:07:77:da:c4:41:ee:e6:25:53:c8:00:7c:fa:
40:64:d4:eb:25:d4:6f:22:1e:e5:82:6e:16:bd:be:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.150.0/24
IPv6:
2a0c:b140::/29
Signature Algorithm: sha256WithRSAEncryption
24:2d:1d:9c:43:48:1d:68:85:54:1d:dd:10:13:84:81:37:a5:
3d:b5:02:4e:c5:34:54:46:e3:cd:6a:c8:41:26:cd:52:3c:29:
5e:1d:37:4a:03:58:ea:dd:82:06:31:dd:c9:4c:3f:bb:18:4f:
ba:89:64:26:e2:be:1e:9c:41:25:f9:a6:c1:33:79:ff:bf:24:
e1:18:d9:b4:e9:be:c1:e6:2d:33:b7:8d:84:48:18:ea:31:78:
1a:2e:e7:46:20:f9:e3:1a:9d:bc:4f:a7:c1:1e:f1:0f:25:ac:
4f:f0:12:ed:fb:8a:40:f2:2c:2c:d2:3f:37:a1:88:b0:6a:c8:
82:20:04:5e:d9:05:24:90:6e:7b:f7:29:04:77:69:76:fa:e4:
52:90:3b:32:c6:d9:04:ce:44:de:82:3e:a0:f2:ec:a1:97:ee:
7c:25:a8:28:ad:e2:9e:06:fc:cc:ee:78:f3:88:f1:55:95:87:
13:48:44:29:04:64:44:10:d7:45:85:58:f9:ae:93:2a:d3:85:
4c:aa:17:45:79:f0:28:41:c4:57:2a:26:8a:5b:79:1d:e1:7b:
cd:37:11:4c:6c:20:ac:97:f2:38:c9:9e:51:87:4c:50:41:ae:
c7:a0:e0:93:42:52:e1:ba:c4:1d:47:f8:10:5b:c5:e4:44:cf:
7f:6d:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:44:18 2025 by rpki-client