Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
File: yCIG9QbIJusQV-XCabNxDjiraWw.cer (raw, json)
Hash identifier: 9T3LPGx6XFGzHd3Dx4GusCc2v/v2t9ZQ8ioY7Q6pHG8=
Subject key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC1BCFBEBE8A4D72079D6815833ACE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.123.51.0/24
IP: 194.139.6.0/23
IP: 194.173.47.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1b:cf:be:be:8a:4d:72:07:9d:68:15:83:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:49:4b:ca:7c:be:dd:37:00:ac:db:0e:3a:
01:b3:81:71:15:a2:19:f5:ef:03:89:47:6d:6b:0e:
b9:81:b3:13:44:b2:c4:77:8a:fe:b3:3c:96:cd:13:
7b:82:ce:b1:b8:54:d9:06:ac:e0:4d:b7:cd:a9:7e:
e3:00:1d:5b:d3:a1:df:49:f0:65:bd:e1:21:82:c8:
a6:87:6f:07:b9:4e:ed:0c:1e:25:5d:48:93:11:f1:
2e:24:7d:96:e8:fd:41:45:37:d3:4b:ec:8e:ec:b8:
98:72:57:a3:6a:e1:56:4c:c9:9f:53:7b:08:09:ed:
56:fd:de:16:0b:f2:fd:ac:c7:bd:f4:f2:e3:c4:ba:
4d:c6:7d:8a:05:63:46:32:86:11:9c:02:92:16:4c:
8d:52:e5:83:66:c6:d8:13:85:46:5c:fa:32:84:0e:
19:12:2d:d0:90:1c:1a:43:7e:67:7a:8b:1b:1c:26:
07:1a:06:40:f6:ca:98:af:e5:48:15:83:26:bf:bc:
1a:e8:2f:4c:0c:d3:db:b6:b2:85:b3:4d:5d:d4:50:
d2:5d:25:a9:03:88:2c:65:d4:ab:f2:2e:f4:8f:af:
60:32:6b:30:ba:4d:da:30:c8:78:f5:ff:81:77:c7:
d3:7f:34:8f:23:94:a8:b9:3b:64:a1:49:97:78:95:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
20:03:21:c8:6e:29:85:b3:41:67:e3:00:95:96:89:59:9b:c5:
c6:4f:be:37:f5:65:87:2a:79:f7:7b:e7:26:2b:69:81:20:3c:
c9:ca:78:74:5a:ed:52:68:37:07:99:17:84:9e:a3:b8:51:97:
32:40:6a:60:56:59:50:df:88:f6:5f:8a:6a:9c:4e:26:96:e8:
78:88:25:dc:41:60:e0:61:07:5f:9a:75:e9:1a:af:ce:e0:8c:
c4:c0:8a:bc:b0:d5:c7:f9:91:62:17:56:d6:8c:63:63:b6:c1:
41:5e:20:fc:16:4f:9b:68:22:09:34:cb:5f:d5:53:93:5f:27:
38:ac:2c:f7:45:74:d8:2c:26:11:14:f6:9f:2f:7c:e5:9d:cf:
30:42:08:0e:70:96:e6:65:aa:7f:36:7d:6a:3b:b4:32:0a:a5:
b1:00:f9:5e:ff:41:3f:ca:9c:43:10:15:a0:8c:92:dc:95:57:
01:f7:fb:3a:8f:bd:ef:0e:c8:90:7c:fb:2c:14:9e:f6:ef:68:
5a:38:8a:04:68:92:6e:c2:06:60:5e:04:7d:84:b1:a1:2c:6d:
02:22:48:6a:37:9c:c4:7c:ee:de:0f:50:07:d9:69:62:1b:e4:
6c:3e:72:15:a1:a8:4c:60:0c:a2:98:70:36:47:23:1e:c4:75:
75:16:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:24 2025 by rpki-client