Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
File: lN7qVibZ6DJkDx7N9_i7clckCEc.cer (raw, json)
Hash identifier: 3n/jZMCQd0Eaxj4TF1rpq2/HFDDgiMzA6TAPUTvxSdI=
Subject key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144406AB9F6E636D6D67BA43C6E9D5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8635
AS: 13013 -- 13014
AS: 60410
AS: 203211
AS: 210873
IP: 2a02:9f8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:6a:b9:f6:e6:36:d6:d6:7b:a4:3c:6e:9d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:bc:fa:20:7f:e1:74:12:56:85:30:9e:b6:
7b:f8:b7:87:8b:b9:a1:3d:06:f7:ad:eb:df:63:5b:
fb:3e:23:7f:ea:e5:29:af:8b:9f:8b:f2:d1:f3:74:
1e:20:5f:d2:49:30:fa:54:d6:21:96:79:c5:02:e1:
19:64:c2:f1:67:c8:fc:52:b5:22:5e:94:95:24:b4:
77:3c:00:9a:24:fc:a3:96:72:9b:8d:f6:4e:7b:32:
d1:dc:7e:88:ca:d2:cb:5f:ec:42:23:a7:06:79:d1:
3e:e8:5e:71:e5:33:60:b5:f2:d6:2a:f5:f8:73:33:
7c:9a:79:c3:db:fc:6b:51:48:9f:d6:ad:97:f3:92:
39:da:bd:8d:ef:30:89:e7:b8:56:eb:6e:da:d5:0d:
de:8b:19:9f:28:e3:3a:6e:6f:83:df:b4:a3:4a:bb:
f9:ae:7e:e4:df:7e:c6:9f:dd:78:b6:09:21:a5:16:
ef:35:24:ac:4c:00:c4:7b:00:0e:1e:0f:2d:fc:60:
dc:29:ad:05:bc:16:11:9a:1d:e4:6c:b8:31:02:83:
4e:91:d8:4f:24:69:6e:a8:b4:83:16:d8:80:91:52:
f6:5f:f6:7c:5d:cd:8f:69:bc:f6:3a:a6:5e:42:be:
7e:6c:14:1d:a0:69:09:cd:ae:48:92:c6:8b:71:32:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8635
13013-13014
60410
203211
210873
Signature Algorithm: sha256WithRSAEncryption
8b:e0:ed:1f:eb:95:5a:eb:cc:dc:84:ad:fb:85:ab:01:ab:9d:
3e:28:71:99:e7:11:a5:71:3a:a7:1b:68:bf:1b:e8:bd:0c:f3:
7a:12:52:58:c0:1d:ca:a5:36:07:28:31:76:43:2e:b7:a9:67:
f7:61:2a:73:8a:55:ac:0c:2c:3b:45:99:3d:6d:63:fb:f9:de:
3f:55:6e:2d:06:e5:54:3b:9e:e1:dc:d0:21:90:3b:34:6f:c3:
6e:2e:7e:a0:5e:af:ed:5b:6f:2b:07:b0:1d:63:86:46:e3:2f:
37:41:95:db:8a:97:51:56:bc:64:0a:27:86:30:8d:02:67:11:
24:91:82:cf:76:11:ee:0b:be:8e:85:45:c3:62:8e:27:6e:05:
77:1c:4b:e3:a2:f4:14:1c:2f:85:6f:92:88:b6:16:86:7a:22:
4d:07:e0:c2:a9:f1:be:30:d8:47:ab:b4:4c:fa:bd:04:b9:29:
88:5c:e4:b7:7b:d0:4c:64:e9:ed:9c:9e:13:c1:55:2f:e7:b4:
60:fa:3b:d8:3c:29:d3:32:63:99:8e:3a:7f:f7:34:53:44:e8:
68:9e:0c:33:f5:01:29:a0:24:1a:68:9f:0f:be:34:c9:dd:d4:
4a:88:3b:df:c9:f8:8b:a6:04:65:44:08:df:1d:c2:a1:96:3e:
a9:a0:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:02 2025 by rpki-client