Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
File: rdJhytDf8tm7L4x60Nsm7Vcw090.cer (raw, json)
Hash identifier: LhlyxDk6h03Z1LL6JH8oN3H4QsVA0O0ALtsJhdo0+/c=
Subject key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DF4C4644DA26167F5C61E3078A1F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.252.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f4:c4:64:4d:a2:61:67:f5:c6:1e:30:78:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:05:24:1d:0a:ad:cd:94:fe:97:38:ac:cb:
0f:a4:11:7f:96:d6:f4:5d:23:37:1a:87:10:8f:4d:
6c:6b:f0:e4:f7:a8:bb:9e:7a:1e:be:9e:4c:15:a9:
77:ff:e0:a7:f7:05:83:36:e7:79:e1:59:12:20:7c:
6d:6f:1a:47:a4:47:a9:ff:a5:ff:59:54:2e:5e:cf:
92:56:6c:6b:57:b4:7f:a1:75:c5:34:e2:00:fe:5d:
93:5a:96:2b:5a:7c:77:8c:97:59:13:f0:75:76:08:
bc:94:20:6b:2d:8b:d8:0a:67:53:07:9f:0b:75:2e:
bc:25:81:73:21:d7:c3:22:cb:06:19:18:d4:c0:d0:
71:a4:fb:1d:32:b0:51:b1:50:75:f8:5a:1d:9c:20:
68:88:62:12:de:18:0d:cf:15:36:e7:9a:8a:ed:4f:
69:2e:2d:55:e9:70:d4:ad:92:e6:03:38:bd:80:47:
1c:b6:7a:85:0e:ca:0a:19:98:ba:e3:e1:f4:47:75:
33:60:69:37:00:79:b3:b3:40:72:85:1d:23:06:45:
8f:91:5d:4b:eb:b5:da:bc:bd:a4:83:10:34:19:30:
04:76:a3:e2:8d:af:02:50:ef:94:9a:45:ee:c6:14:
25:ee:4d:38:e1:f9:96:f9:21:89:22:3d:fb:54:08:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.252.0/22
Signature Algorithm: sha256WithRSAEncryption
20:58:3b:85:90:3b:83:bb:d0:ab:dc:55:bf:17:01:4d:23:11:
1d:3c:0c:5b:b7:e4:b5:5c:5c:fb:90:4b:79:04:34:82:29:e3:
0e:ef:df:0b:e3:40:fc:d5:3d:07:84:d0:b3:53:1b:18:5b:1c:
49:bc:9b:b5:75:57:cf:e5:99:dd:e9:a1:4f:35:bd:6f:c8:d8:
89:fa:28:8c:da:bc:b0:c5:79:ee:a4:a5:44:21:9d:a1:2f:5a:
fb:45:b3:c4:ba:92:6a:b7:f1:56:9d:09:32:8e:46:ff:50:35:
6b:91:8a:56:dc:1d:61:57:ec:0c:03:79:d8:6c:57:a1:fc:93:
f4:6b:7a:10:b9:01:99:0b:f6:8f:0c:3f:a7:7e:6e:7f:b3:cf:
2c:b3:cf:32:25:22:72:fc:ac:3e:39:68:af:ec:c0:ea:73:95:
0d:33:dd:fd:a8:3c:03:e0:4d:88:37:ac:a2:9c:db:c5:13:a1:
9e:24:dd:2d:65:e9:56:ec:fa:9c:05:44:36:ce:4b:7c:40:21:
66:81:1e:bb:ed:21:3e:bd:1f:85:9c:05:8d:1e:6e:98:eb:61:
be:d3:af:7d:ee:54:14:4d:81:68:75:fe:e4:be:eb:81:ec:32:
cf:fb:39:c0:2d:3f:39:72:a0:58:e0:54:7c:77:c7:da:05:71:
28:db:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:53:35 2025 by rpki-client