Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer (raw, json)
Hash identifier: Q4vnh9HAttF/DEVFhk5IpnQ2zUFDAzOyGf2uZhnZK9M=
Subject key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB53D4CA9F320AF968D08D26AAEA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2dc::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b5:3d:4c:a9:f3:20:af:96:8d:08:d2:6a:ae:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:b5:83:e2:2e:65:d4:c7:89:a0:c8:18:02:
0d:80:eb:33:3b:ad:6c:34:f0:40:72:37:ed:5a:dc:
e9:2a:2d:9c:4a:38:41:9c:f5:a3:72:a8:62:53:57:
85:01:84:f5:c3:3c:92:43:5e:f1:66:07:e4:b3:96:
2e:27:9e:fc:ce:fd:16:7b:de:03:25:44:7c:cc:94:
a5:db:22:26:00:26:e0:a5:02:86:56:04:4c:3e:ad:
cb:e9:3e:75:d3:4a:f5:b9:8e:21:00:cf:9d:88:b1:
47:42:65:b4:fc:7d:73:96:97:62:dc:9a:63:1a:03:
77:4f:1d:39:b2:41:f1:b8:57:af:12:d4:21:d8:a3:
7d:1b:05:76:19:06:ba:d5:9e:5f:dd:5d:dd:0c:c3:
f0:85:b3:75:65:ac:a5:f2:da:58:26:5a:78:70:34:
b6:bd:d1:a0:fc:6d:43:94:23:5c:d1:a2:e3:a2:0c:
3c:30:40:27:f0:a7:1d:05:6d:a2:23:4c:4b:17:c5:
6b:e8:b2:b9:43:ac:7e:f5:fd:1b:41:9b:d5:4d:82:
6d:e1:22:31:bf:97:51:5c:9c:40:de:53:a3:64:40:
4c:00:d2:a0:5f:fc:fa:35:ae:60:c2:56:1e:ed:df:
39:b0:bb:30:48:8d:73:87:85:13:9c:b7:92:66:b4:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
4e:46:71:6d:99:7f:22:4b:c6:9e:a9:71:10:18:46:a4:4f:86:
85:5e:da:bd:8f:a0:5f:92:dc:9c:77:40:00:21:d2:1b:1f:da:
20:22:f1:a8:20:e8:d4:e8:17:bd:4a:3d:68:34:8e:de:c6:e1:
ed:8c:45:b8:16:02:db:ac:fb:6d:f3:99:55:f4:b7:13:48:d4:
ac:22:f3:6c:48:ad:e3:9e:9a:e9:6c:b0:55:78:5d:f0:d7:56:
5f:6b:ab:eb:25:bf:90:10:b2:aa:4f:e7:a0:d8:64:53:18:f8:
16:5c:b5:d6:47:b9:2a:0f:38:1f:8f:34:2f:54:9b:4b:c0:75:
d5:b6:6e:3f:65:2c:c7:20:67:76:32:8c:63:76:12:c7:04:e0:
5d:c5:09:9e:08:c1:fb:48:cb:fa:2d:08:ec:fe:74:1b:a6:24:
cd:30:c0:32:a2:95:92:bb:cd:33:91:8a:91:9c:dd:a3:c4:f1:
ca:00:fa:56:61:05:e5:a8:a3:56:64:e8:35:b6:ea:05:a4:bb:
b7:a7:96:be:b6:c5:e6:75:fe:3a:16:7a:bb:52:3d:06:37:d6:
6e:8f:30:3b:94:82:e5:07:75:88:46:d7:71:5a:40:09:6c:ea:
9f:2b:c1:16:fb:ee:ae:1b:c2:cb:c6:38:9f:52:9f:03:c0:42:
29:78:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:40 2025 by rpki-client