Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
File: uFnbfywuOzq9i_QV8M4f_zNDKew.cer (raw, json)
Hash identifier: ZdSZ0Bq3nm1yAnHmXzUNNTjWIcj5vYxQrVlHJxckfAk=
Subject key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1902070703A32F0D6354FE1D6DE86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.54.218.0/23
IP: 185.159.136.0/22
IP: 195.28.22.0/23
IP: 2a07:b440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:90:20:70:70:3a:32:f0:d6:35:4f:e1:d6:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:20:66:13:99:72:65:c2:28:f3:30:ff:29:
30:2a:fd:7a:5b:cd:22:0f:32:7e:4f:e6:f7:e4:1b:
89:d9:ba:92:b4:3b:3c:9c:a7:49:cc:32:3f:19:92:
f6:f8:fd:5a:cf:0f:f2:67:40:d7:f9:4a:f4:ab:fc:
78:d9:8b:9d:78:83:1d:85:67:4c:d4:54:02:13:cd:
e5:67:ba:79:0c:7f:bb:0a:04:40:c6:75:a2:76:34:
cc:e4:a9:7c:75:14:93:c7:37:60:03:93:63:09:41:
e5:b2:53:54:0b:4f:d6:3f:27:24:1e:a8:40:d0:e2:
16:30:02:83:e2:62:c8:86:d6:8b:2a:d2:cc:4e:d4:
d1:6f:ac:c3:9e:c5:9d:8b:36:26:6a:8e:80:82:63:
29:45:2a:53:b8:5e:ef:60:f7:1d:77:d3:56:df:20:
22:7d:49:ca:f4:ee:b0:03:0c:2c:46:ba:65:46:cd:
f5:26:ee:a9:1f:d9:15:80:3a:b5:c1:ae:d7:32:24:
71:41:b7:a5:50:70:6d:19:a2:c5:10:89:60:ad:25:
2f:8d:da:da:d1:7d:7d:43:a8:c5:71:12:ad:cb:86:
d0:3c:e0:9f:7e:ef:a8:2d:50:64:ff:25:22:b4:ab:
1c:02:8e:fc:9f:9c:07:8a:60:ed:62:c0:05:76:21:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.218.0/23
185.159.136.0/22
195.28.22.0/23
IPv6:
2a07:b440::/29
Signature Algorithm: sha256WithRSAEncryption
5c:ba:0f:34:35:9f:e9:ca:9b:68:d1:b8:19:78:4d:f7:70:9f:
18:56:ae:97:4b:63:97:46:46:3e:12:cf:a8:ff:78:5a:be:36:
25:55:97:0b:c4:a9:1d:60:e1:c0:83:5a:40:c8:88:6c:21:84:
b8:e5:c0:e5:6a:81:68:cd:07:fe:b2:07:35:c9:69:49:9c:0b:
d6:bb:a4:9a:bd:2b:0f:d1:b3:d2:18:f7:a5:bf:6c:79:f2:03:
2f:a1:6b:ea:96:fc:84:6f:bb:cb:b3:2a:ab:68:21:03:54:60:
ad:05:7f:4e:68:f1:a0:1c:f5:c6:b4:da:91:6f:49:7f:e9:86:
ee:1c:53:4f:f9:6d:60:b5:98:5e:76:7f:0a:0f:61:d4:4f:66:
a7:ce:19:fd:25:41:f4:a3:14:76:39:20:50:f4:b1:3d:29:c5:
4a:b6:82:62:10:af:f4:dd:9b:5d:2e:33:71:92:bc:c2:ad:06:
fe:49:1f:ce:f6:2b:48:1f:79:85:a8:5c:e6:14:24:c9:1b:12:
64:6f:e7:80:a9:96:e2:8c:20:b6:bb:4a:9b:85:f5:29:b6:ca:
38:bd:d1:64:5f:54:35:a5:eb:24:db:ec:da:a3:15:56:63:36:
ba:76:ab:42:d2:7a:ee:29:01:65:c7:da:40:c7:9e:4b:33:66:
8a:65:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:34 2025 by rpki-client