Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer (raw, json)
Hash identifier: pvGcbRcGB3u842LQ6icwb47lKP4r8HKgsnlKpPxZmkc=
Subject key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424455282CE6AA72819AFB930C8FFD645
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.106.93.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:52:82:ce:6a:a7:28:19:af:b9:30:c8:ff:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c54a846632e83340e114d0d35591b3d42188b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:30:da:0a:8e:09:0a:38:e2:7a:12:a4:1e:
69:25:34:ea:18:47:47:ed:ae:49:5b:92:5c:8d:8c:
50:c8:c1:43:75:72:7f:06:4f:79:0b:47:8d:b5:55:
9c:c0:a2:e4:e6:d4:72:37:dd:c6:dc:e6:7c:0f:11:
1e:1b:58:0b:a8:ca:e5:32:aa:fc:f7:77:c7:ca:62:
51:02:df:18:1b:df:dc:23:d1:66:e1:23:b4:47:67:
59:9c:89:3c:8b:7b:70:71:0f:39:5f:72:86:03:f0:
f6:7f:f1:43:51:24:5d:2c:cd:7c:b4:ff:e8:e6:5b:
7b:21:0c:65:b7:aa:ee:f5:c4:17:d0:1d:c3:8e:1d:
84:b0:42:ba:14:42:37:cb:6c:e2:aa:ff:b5:ef:42:
df:9d:44:62:84:15:2e:4f:bb:fe:37:e9:78:f9:10:
f2:f0:cb:55:52:c5:2b:df:a0:2d:48:58:03:46:96:
8c:a5:66:6b:06:a0:f1:53:8a:5b:65:f4:7d:f1:b5:
6e:b5:d3:b9:f2:e3:82:56:a1:fc:1f:fa:25:b6:40:
d9:0b:2b:56:47:68:8f:04:a9:dd:99:41:b4:41:af:
2c:55:be:68:75:89:dc:d5:e8:06:5d:bc:c1:83:8f:
e2:5c:d5:53:43:06:6d:94:df:d3:22:51:62:6c:7d:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:20:2d:05:a4:20:38:ae:fd:d9:13:28:42:bc:69:f1:65:21:
e8:94:8b:36:46:ca:14:97:64:ba:fd:43:45:2b:f5:bb:6e:fa:
a4:2e:61:5c:90:e4:10:b4:ef:0e:ef:3e:b6:4b:87:fe:55:a2:
87:c9:15:25:63:1c:e6:c9:df:1c:2f:8f:43:19:19:52:20:63:
05:fb:bf:22:c1:af:70:6e:ab:3c:23:46:5a:2d:7f:22:37:f0:
44:9c:84:d2:62:60:39:76:f9:e3:ac:9e:7d:d0:f4:04:e3:18:
72:58:47:25:f7:74:8d:bb:d5:1f:12:79:b1:c4:db:e9:fe:7c:
a9:99:0e:2f:8a:9e:c5:bc:08:95:a7:8d:63:60:b9:55:f6:6b:
0e:3a:83:41:99:3d:d7:03:6e:e5:c7:6b:50:c1:ef:9b:fe:24:
91:82:03:04:dd:ee:8c:f4:a4:23:af:ba:8c:28:f9:3a:3b:83:
67:da:7c:64:ab:05:38:04:5c:b1:a6:85:48:8e:26:26:44:15:
e3:f3:04:b2:ff:92:9d:a7:6e:76:9c:cc:2d:ce:a1:98:19:f9:
58:30:63:6b:97:a9:79:d5:99:21:31:61:56:7d:01:8c:3d:4a:
24:cf:cf:a4:f9:68:1e:55:eb:26:db:b0:44:59:32:cd:13:fb:
80:6d:55:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQkRVKCzmqnKBmvuTDI/9ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzU0YTg0NjYzMmU4MzM0MGUxMTRkMGQzNTU5MWIzZDQyMTg4Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSkw2gqOCQo44noSpB5pJTTqGEdH
7a5JW5JcjYxQyMFDdXJ/Bk95C0eNtVWcwKLk5tRyN93G3OZ8DxEeG1gLqMrlMqr8
93fHymJRAt8YG9/cI9Fm4SO0R2dZnIk8i3twcQ85X3KGA/D2f/FDUSRdLM18tP/o
5lt7IQxlt6ru9cQX0B3Djh2EsEK6FEI3y2ziqv+170LfnURihBUuT7v+N+l4+RDy
8MtVUsUr36AtSFgDRpaMpWZrBqDxU4pbZfR98bVutdO58uOCVqH8H/oltkDZCytW
R2iPBKndmUG0Qa8sVb5odYnc1egGXbzBg4/iXNVTQwZtlN/TIlFibH3SgQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIxUqEZjLoM0DhFNDTVZGz1CGIt2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzgyYTY2
MS01NTg3LTQwODMtODEzYy0zNDU5YmUyNjY3MzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvODJhNjYx
LTU1ODctNDA4My04MTNjLTM0NTliZTI2NjczMS8xL2pGU29SbU11Z3pRT0VVME5O
VmtiUFVJWWkzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPmpdMA0GCSqGSIb3DQEBCwUAA4IBAQALIC0F
pCA4rv3ZEyhCvGnxZSHolIs2RsoUl2S6/UNFK/W7bvqkLmFckOQQtO8O7z62S4f+
VaKHyRUlYxzmyd8cL49DGRlSIGMF+78iwa9wbqs8I0ZaLX8iN/BEnITSYmA5dvnj
rJ590PQE4xhyWEcl93SNu9UfEnmxxNvp/nypmQ4vip7FvAiVp41jYLlV9msOOoNB
mT3XA27lx2tQwe+b/iSRggME3e6M9KQjr7qMKPk6O4Nn2nxkqwU4BFyxpoVIjiYm
RBXj8wSy/5Kdp252nMwtzqGYGflYMGNrl6l51ZkhMWFWfQGMPUokz8+k+WgeVesm
27BEWTLNE/uAbVVr
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:39 2025 by rpki-client