Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.cer (raw, json)
Hash identifier: QDQE90q4C7cHloBaQ/aUnGj7eNsX1M9AQmB3QP6Ndrg=
Subject key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424452DAF6EDF066F9BFD460A4D44E272
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.173.20.0/22
IP: 2a0b:3100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2d:af:6e:df:06:6f:9b:fd:46:0a:4d:44:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:de:12:bb:5f:19:3b:b1:9d:6e:e3:9e:a7:
8d:69:b2:9c:69:85:58:15:27:10:73:62:be:6c:45:
8a:97:8c:e5:cc:ed:13:07:06:31:b5:bd:43:e0:5b:
b1:0b:c7:ee:b9:91:2f:31:78:38:67:4b:db:16:13:
77:93:c9:6c:e0:6b:44:d9:11:90:f1:5b:b0:af:01:
68:70:d1:11:95:62:49:df:59:82:b4:a5:e6:60:f6:
80:02:22:f2:02:08:0c:a9:f1:b2:06:d3:12:e9:c0:
97:04:27:6b:76:ac:50:3f:6a:31:35:35:c4:ac:99:
6f:ea:cd:84:0b:0c:68:ef:8c:4a:61:9a:66:2f:c3:
2a:51:35:7a:8b:7f:5d:9c:0e:8f:a5:34:48:71:58:
83:3e:7e:e2:77:d6:6d:07:d8:91:1d:cc:6e:3b:c7:
f3:86:1d:ca:3b:60:72:1c:08:22:37:9e:0e:7c:bf:
4d:2d:73:90:f1:e8:49:d2:30:8d:44:ef:2c:b0:5b:
38:7c:08:25:ac:74:1b:92:56:df:53:2f:06:dd:8c:
39:f3:74:39:f1:9d:87:0e:b7:39:69:7e:1a:e8:a2:
bd:e3:a4:1e:8b:70:81:29:50:dd:e0:e6:25:69:b8:
27:ec:64:f7:1c:79:0b:5a:ab:bf:c2:5d:32:44:b4:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.20.0/22
IPv6:
2a0b:3100::/29
Signature Algorithm: sha256WithRSAEncryption
7f:c5:0a:34:57:a6:2f:da:ec:ae:eb:53:df:5a:4c:66:89:d8:
4b:0c:23:57:04:b7:0b:28:1a:c7:6c:05:88:3f:4d:9a:07:f5:
f3:4b:10:23:2b:ea:06:31:79:34:a1:6f:84:41:6f:a3:fc:51:
2f:6b:79:d9:ea:43:23:01:f9:00:72:b9:17:ae:e9:cd:8c:2c:
3d:07:f4:83:fe:65:2b:f4:99:3f:1c:f6:d9:d4:96:16:fb:ba:
4f:31:32:0b:c4:ee:62:6b:46:54:43:43:62:87:f7:1a:55:42:
f0:bc:c3:26:68:54:78:7a:f0:c5:c4:1f:36:b6:29:e3:8a:8a:
47:f9:0e:be:c6:59:7d:23:db:78:4f:8c:91:0b:7d:33:ac:7a:
7f:c6:9c:be:ee:7e:3b:ff:07:16:0e:ae:4d:b6:08:52:78:d0:
de:80:83:e8:6a:13:e4:50:bc:63:d1:50:9d:da:a2:fa:f7:7f:
72:2d:ed:c6:cd:e4:f8:b6:e6:fd:0c:fe:44:a8:58:62:a9:b2:
37:80:6f:25:c4:f8:0b:fc:a3:62:6d:17:f1:f2:e3:42:f6:4b:
45:42:1d:5e:d9:92:d5:b5:d9:82:dc:73:37:72:94:f6:a6:f5:
db:f5:8f:c4:aa:52:93:07:a9:eb:1d:0f:78:6d:b2:11:43:1d:
cd:37:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:36 2025 by rpki-client