Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.cer (raw, json)
Hash identifier: vHf4Zx/US56vPSkJlIIwgdCWrhr9oIUfdGlqgjQJYCI=
Subject key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC2D30309294E80E1BE1C408CCCB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 188.64.16.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:d3:03:09:29:4e:80:e1:be:1c:40:8c:cc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:cb:f5:be:6a:e0:76:9e:c8:c9:02:97:ae:
46:20:45:e3:08:15:2f:bc:ea:af:52:62:6c:7a:48:
34:6f:3e:d4:16:b1:47:46:b1:16:1c:34:d9:33:d1:
d7:de:9a:95:26:ad:9d:49:44:1c:39:a7:0f:81:78:
97:7f:45:7f:0d:59:72:89:68:ba:cd:3d:57:d3:90:
05:54:f6:fe:cb:d1:a8:e4:87:e8:e0:2c:c9:8a:3b:
92:74:6e:11:98:1c:04:56:6e:08:4e:64:a7:89:99:
93:2f:f4:81:ec:80:68:7d:73:84:2f:da:a0:f6:8f:
d9:ea:86:84:40:26:af:ed:05:aa:d2:1a:3b:c7:fa:
90:ff:3a:0d:e7:8d:37:36:60:f7:b7:f3:5d:31:a4:
7c:9d:6a:97:ea:3f:39:f1:04:f2:33:45:10:ae:31:
f2:ef:29:30:5d:60:a1:b4:59:f1:1c:4d:86:36:63:
f7:24:7f:5a:a9:e0:cf:a4:e1:b3:18:f7:a9:dd:1f:
e3:59:8f:27:07:50:b9:46:ea:02:54:1a:55:d7:52:
89:94:5e:06:33:35:74:3e:f5:f9:ee:6b:de:83:ef:
2e:4d:97:81:30:84:ce:c9:c1:62:f5:96:ce:43:ab:
ff:d9:7d:55:64:af:3e:71:a3:b1:c9:6d:a7:c4:0d:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.16.0/21
Signature Algorithm: sha256WithRSAEncryption
65:f1:a8:ef:55:91:2a:87:64:6d:77:59:42:93:74:d2:61:48:
46:0b:92:b4:89:ed:af:b4:c2:9e:ba:12:f6:ae:7b:b7:1a:48:
f8:f8:62:e0:5a:f1:55:9d:17:ca:82:b3:2a:9a:c0:bc:9a:b9:
56:89:cc:6a:db:47:38:80:96:85:4b:2b:18:3b:1d:ea:0f:76:
f2:9e:71:89:40:71:c5:0f:c0:ca:63:a8:c8:d0:c3:f1:54:fa:
f5:df:42:55:3c:ae:a4:a4:c0:26:ed:2d:a8:08:1d:74:85:1f:
18:d1:26:22:87:1c:2f:98:bc:94:a6:02:b7:35:9c:62:b9:90:
83:a8:6a:23:f9:0e:ff:31:d9:50:02:d1:ce:b1:73:e3:59:8d:
ae:50:82:b6:ac:67:37:58:4e:1a:c0:bf:db:17:9e:9b:41:86:
22:f9:92:e5:c8:a2:5b:1c:98:b5:e0:3d:d1:ad:73:42:f1:43:
16:29:d5:c4:e1:46:86:77:b7:48:88:37:4c:3d:fd:aa:14:4d:
35:43:2e:b3:c2:93:7d:1b:37:22:37:81:16:98:bb:b9:ea:a3:
16:b3:10:e8:2a:a7:a8:7a:e3:f4:aa:8a:a2:85:34:90:20:5d:
03:e4:5f:f7:70:6e:e8:99:63:61:0a:b6:2e:d5:09:ee:d8:b7:
f3:78:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:28:07 2025 by rpki-client