Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer (raw, json)
Hash identifier: YOpuzp8rJDT9/u8x8c3MXjPgWy5XBU6xlp273tnJJRE=
Subject key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425221906D189DD7421C4F35328BCAA60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.233.14.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:19:06:d1:89:dd:74:21:c4:f3:53:28:bc:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:76:f6:f7:78:6c:0a:62:c7:b8:fb:99:57:
45:e2:ee:de:cb:35:d2:b5:06:b6:4b:52:fe:54:e3:
96:f5:ae:11:60:d1:f0:f5:0e:d4:7f:9b:17:ed:0f:
b7:bb:bc:be:d9:be:33:93:30:c2:ec:be:73:3f:53:
87:8f:d5:cd:ae:8b:c0:4e:12:30:59:b3:6b:18:6f:
08:3e:52:cd:2d:a5:89:09:9e:d2:10:82:27:ac:94:
8a:52:dd:f7:88:53:6f:80:0b:79:f0:20:ab:65:50:
05:a3:a1:40:ec:df:d1:c6:ee:91:73:45:b5:96:b5:
77:ee:21:0c:54:b9:8e:37:bd:1a:e6:73:b5:0d:d3:
54:f4:e8:c5:3e:ca:5a:27:97:8b:5a:9a:6b:72:cb:
9a:02:e8:90:c3:82:42:bb:2a:d6:aa:4f:2c:5b:87:
aa:bf:8d:16:ba:ea:76:08:11:e2:a2:d4:24:23:f0:
db:6c:56:b8:3f:52:17:32:79:a1:e5:d6:11:d0:55:
9b:3d:ec:2c:20:dc:72:b6:ab:aa:6d:10:d1:cf:fe:
18:33:47:a6:90:d7:7d:b9:38:0a:34:e4:8c:97:46:
12:d2:2d:8b:b6:b4:41:97:c6:85:2c:6e:15:3c:72:
85:60:d1:7e:fc:ae:95:bd:fc:b5:84:09:c6:73:91:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:60:f2:17:a7:82:5e:b5:fd:f0:59:fe:3b:d4:4d:58:82:61:
95:e1:e2:f5:b6:d1:5b:fb:c7:f7:0d:e2:45:a0:9d:f1:a6:fa:
66:63:57:7a:b8:ee:02:a4:37:3d:1f:fb:d2:f7:3d:c5:6c:30:
9c:b6:f9:aa:77:a6:93:eb:4a:dc:f5:a7:a8:13:b8:a7:a3:3b:
0b:47:11:b9:de:df:71:0f:44:e3:c7:56:db:4c:25:9c:ec:b8:
de:6a:27:a5:8d:f7:b7:86:c8:e8:72:1e:67:af:0e:cf:ec:f9:
60:ec:6b:b8:ee:73:85:db:d9:b7:fb:ab:c0:9c:ba:6e:78:a8:
83:77:0e:c9:4f:e8:06:5c:cf:a2:d6:65:4f:b9:7e:7d:d1:d9:
45:11:50:8d:cc:63:2d:bf:65:f0:d1:e1:c7:80:78:e7:73:a9:
3a:78:2c:f3:e2:1c:19:97:60:80:f8:89:5c:b4:4e:16:f0:6e:
7b:60:bc:24:fe:5d:4e:ba:d8:81:2c:d0:66:18:dc:93:d3:e6:
5e:82:26:56:2e:2e:d1:73:e1:82:2a:42:9e:27:78:5f:ee:61:
62:8c:79:bd:bc:d7:56:a8:ba:a0:48:8d:94:8d:8a:ae:2f:5c:
2f:b9:5e:2d:a3:0f:62:a8:dc:4a:04:c1:65:c3:0c:45:3f:61:
f2:dc:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:42 2025 by rpki-client