Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer (raw, json)
Hash identifier: TpIqhz8yujDtbyCJ+RVds1UnGmzvvv0ZOnth9msWumk=
Subject key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EBD3072382F14BFE948E189D761A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.255.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:eb:d3:07:23:82:f1:4b:fe:94:8e:18:9d:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:4c:75:03:bb:58:e6:53:18:63:a8:f9:a0:
c0:9f:fb:91:e3:46:22:54:d1:3b:21:d4:6b:4c:5f:
d5:52:15:51:15:f3:c0:47:f0:e4:28:1b:c6:e2:41:
52:a2:63:80:b3:47:6d:e1:5a:7a:49:94:15:cc:90:
8b:22:b8:f6:87:cf:37:d5:81:4a:08:70:c2:47:80:
85:ef:b4:0e:a4:1a:50:3e:26:90:12:8d:76:24:0e:
19:af:d5:02:40:a5:ea:94:86:98:84:19:fc:4d:57:
be:16:5b:2f:e6:8a:1b:76:5a:c4:dd:3b:13:83:63:
2d:5e:f6:c2:06:35:7c:0b:25:f1:54:ab:76:00:c5:
b6:73:8c:fe:7c:b9:74:da:ac:e9:fd:1d:09:5e:7d:
47:71:8b:fb:04:15:e8:06:d1:fb:a7:fc:54:43:3d:
15:c7:81:df:c3:0a:ea:c9:d3:6d:90:15:35:12:f5:
12:98:d9:49:08:9e:fc:9d:22:3c:41:4a:ac:a2:c3:
c2:07:0e:49:ac:cc:1e:d2:78:b5:5d:8e:e0:40:9d:
65:43:de:da:14:38:76:a5:19:31:07:5d:3a:5e:35:
9f:ba:63:db:d4:03:14:ea:33:b7:97:7d:ec:10:31:
2d:b6:0e:37:82:bf:ce:bc:cf:0a:e1:84:d7:c8:f3:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
67:91:41:62:17:c6:08:dc:e8:f4:66:ad:c1:b2:a1:51:be:ab:
42:b8:73:8f:6d:1a:2a:ca:06:73:88:b4:2a:d2:28:92:fe:cb:
31:91:73:ae:4c:5b:5a:3c:72:48:38:3d:2c:8a:52:9b:40:4e:
e1:ee:ed:67:7e:55:0a:ed:5d:8d:f4:72:b5:6e:f9:63:7c:54:
a4:54:fd:fd:7f:eb:60:71:68:37:ff:b1:d3:0d:50:5a:31:ea:
bc:53:03:bf:1f:9b:6f:60:0f:92:9d:ab:8a:6b:54:8c:d2:c5:
9a:3d:75:ae:42:30:5b:d6:16:e8:36:45:f1:d6:14:b7:cf:56:
e9:23:ac:60:ae:5f:4f:c3:e4:17:24:60:87:0d:af:4c:d9:4d:
6e:95:37:3c:89:75:51:90:27:61:8d:3d:96:34:ce:0b:3e:76:
71:0e:12:6e:07:5b:9f:8e:c9:64:de:73:3e:12:62:56:69:b8:
11:08:7a:d3:d5:51:6f:81:79:68:b1:6e:16:43:01:09:cd:73:
96:d6:ba:da:9f:2f:5b:ba:1b:8b:06:37:76:42:c8:58:47:46:
c5:97:41:93:37:75:bc:b0:5f:c6:ed:0b:c4:42:82:11:32:22:
33:26:e1:72:09:56:61:6b:e2:e7:a9:4f:4b:08:fe:3e:ad:55:
f3:d9:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net